monopam: scan_opam_files returns a record, lint honours pin-depends
Replace the 4-tuple [(name, runtime, all, pin_depends)] returned by
[scan_opam_files] with a record [opam_pkg] — names beat positional
fields once we got past three. While here, exempt deps already listed
in the consuming package's [pin-depends:] from the missing-pin check
so packages that ship a pin (like [irmin]'s [tw]) stop being flagged.