Add checker for direct dependency

[tiran]

PyPI does not allow uploads of packages with direct dependencies. A direct dependency is a dependency with format name @ urlspec. This includes references like spam @ git+https://github.com/egg/spam.git or direct download link. It would be fantastic if you could add a checker that detects these cases and refuse any dependencies with an URI.