Fix candidate version detection for packages containing regexp operators

'+' and '.' are valid characters in a Debian package name. Escape them
in the call to apt-cache policy so that we get what we want to know.

Closes: #855954