feat(vendor,scan): lockfile-driven discovery + verified auto-fetch of missing packages #323

Job	Run time
lint-ecosystems	7s
test-release	19m 40s
test (macos-latest)	8m 11s
coverage	6m 11s
test (ubuntu-latest)	7m 20s
clippy	46s
coverage-docker (maven)	5m 25s
coverage-docker (npm)	5m 5s
test (windows-latest)	23m 26s
coverage-docker (golang)	5m 2s
coverage-docker (cargo)	5m 28s
coverage-docker (gem)	5m 23s
e2e-docker (composer)	4m 12s
coverage-docker (pypi)	5m 36s
coverage-docker (nuget)	5m 14s
setup-matrix (pypi)	4m 28s
setup-matrix (golang)	2m 53s
coverage-docker (deno)	5m 16s
setup-matrix (npm)	3m 43s
setup-matrix (cargo)	3m 25s
e2e-docker (cargo)	4m 15s
coverage-docker (composer)	5m 24s
e2e-docker (deno)	4m 2s
setup-matrix (deno)	2m 51s
dispatch-tests	10s
setup-matrix (gem)	3m 1s
e2e-docker (gem)	4m 19s
e2e-docker (maven)	4m 38s
e2e-docker (pypi)	4m 27s
setup-matrix (composer)	3m 5s
e2e-docker (npm)	4m 12s
setup-matrix (nuget)	3m 11s
e2e-docker (nuget)	4m 19s
e2e-docker (golang)	3m 59s
setup-matrix (maven)	4m 39s
coverage-merge	22s
e2e (ubuntu-latest, e2e_golang)	1m 31s
e2e (ubuntu-latest, e2e_maven)	1m 29s
e2e (ubuntu-latest, e2e_safety_pnpm)	1m 41s
e2e (ubuntu-latest, e2e_safety_cargo_build)	1m 31s
e2e (windows-latest, e2e_safety_cargo_build)	3m 30s
e2e (ubuntu-latest, e2e_composer)	1m 34s
e2e (ubuntu-latest, e2e_nuget)	1m 27s
e2e (macos-latest, e2e_safety_cargo_build)	1m 59s
e2e (windows-latest, e2e_safety_pnpm)	4m 2s
e2e (ubuntu-latest, e2e_cargo)	1m 30s
e2e (macos-latest, e2e_safety_pnpm)	2m 13s
	3h 26m 12s

Provide feedback