feat: add source-aware multi-platform lockfiles

[eitsupi]

Attempt to #394 and #400

This is an early draft to share the source-aware, multi-platform lockfile flow. The full PR description will follow.

GitHub Relase support via Packslip

Given this dbc.toml:

[drivers.iceberg]
version = "0.1.1"

[drivers.iceberg.source]
type = "packslip"
project = "github.com/eitsupi/tokoko-adbc-iceberg"

dbc sync resolves the signed v0.1.1 release, installs the host artifact, and writes an exact multi-platform dbc.lock:

Generated dbc.lock

# This file is automatically @generated by dbc. Not intended for manual editing
version = 2
revision = 0

[[drivers]]
name = 'iceberg'
version = '0.1.1'

[drivers.source]
type = 'packslip'
project = 'github.com/eitsupi/tokoko-adbc-iceberg'

[[drivers.evidence]]
kind = 'release-metadata'
hash = 'sha256:be22d799eace1c9351ddf43897dda855e80d2e20d2c0ed32cfbbd3eddba6eb61'

[drivers.evidence.location]
kind = 'url'
value = 'https://github.com/eitsupi/tokoko-adbc-iceberg/releases/download/v0.1.1/packslip.sigstore.json'

[[drivers.artifacts]]
format = 'tar.gz'
package_version = 2
hash = 'sha256:d81249746b3e0a912b307ab8b4a08a0720ecf04f625924851487e5ae1e2b9c81'
size = 10755281

[drivers.artifacts.target]
os = 'linux'
arch = 'amd64'
libc = 'gnu'

[drivers.artifacts.location]
kind = 'url'
value = 'https://github.com/eitsupi/tokoko-adbc-iceberg/releases/download/v0.1.1/iceberg_linux_amd64_0.1.1.tar.gz'

[[drivers.artifacts]]
format = 'tar.gz'
package_version = 2
hash = 'sha256:1e3c163bf76a2cb7cdf27b77160b8d66a6f45e39874027c9f5314f44256934a8'
size = 11014626

[drivers.artifacts.target]
os = 'linux'
arch = 'arm64'
libc = 'gnu'

[drivers.artifacts.location]
kind = 'url'
value = 'https://github.com/eitsupi/tokoko-adbc-iceberg/releases/download/v0.1.1/iceberg_linux_arm64_0.1.1.tar.gz'

[[drivers.artifacts]]
format = 'tar.gz'
package_version = 2
hash = 'sha256:d901eba45862d15bde5f026ef1ec39a2a6b62899f8897e6d3adc134dbfe9e493'
size = 9917956

[drivers.artifacts.target]
os = 'macos'
arch = 'amd64'

[drivers.artifacts.location]
kind = 'url'
value = 'https://github.com/eitsupi/tokoko-adbc-iceberg/releases/download/v0.1.1/iceberg_macos_amd64_0.1.1.tar.gz'

[[drivers.artifacts]]
format = 'tar.gz'
package_version = 2
hash = 'sha256:e7910317ad9a2d1129253b582bb79c51e650a246516765427b356b39a8476e8a'
size = 9397564

[drivers.artifacts.target]
os = 'macos'
arch = 'arm64'

[drivers.artifacts.location]
kind = 'url'
value = 'https://github.com/eitsupi/tokoko-adbc-iceberg/releases/download/v0.1.1/iceberg_macos_arm64_0.1.1.tar.gz'

[[drivers.artifacts]]
format = 'tar.gz'
package_version = 2
hash = 'sha256:cadff4b05bc5df9cc66303870395169a32cacbca2bdb48535eb4ac5dbb08c0a4'
size = 9295421

[drivers.artifacts.target]
os = 'windows'
arch = 'amd64'

[drivers.artifacts.location]
kind = 'url'
value = 'https://github.com/eitsupi/tokoko-adbc-iceberg/releases/download/v0.1.1/iceberg_windows_amd64_0.1.1.tar.gz'

The package v2 and Packslip integration shown here are still PoC/draft interfaces.