Harden move_to script.
If the package name is not found in the packages file (perhaps because
the package was resolved to a different name through Obsoletes etc)
then the move_to script could create two dependencies. Detect this
and hard-fail.
See also:
https://bugzilla.redhat.com/show_bug.cgi?id=1568676