> Imo there's an identifiable core common to all of these kinds of package managers (..)

Indeed. It's hard to see why eg. a prog language would need its own package management system.

Separate mechanics from policy. Different groups of software components in a system could have different policies for when to update what, what repositories are allowed etc. But then use the same (1, the system's) package manager to do the work.