use the version id instead of the mmap offset as APT-ID

This leads to a small performance decrease as we need to build this
mapping now while interpreting the Response but a (buggy) solver can't
point us to dangerous memory locations anymore this way and VersionCount
remains useful for other mapping proposes