feat(vcs): add mozart-vcs crate for VCS repository support

Implement VCS driver/downloader infrastructure mirroring Composer's VCS
subsystem. Includes drivers for GitHub, GitLab, Bitbucket, Forgejo, Git,
Hg, and SVN with API-based metadata resolution, plus source downloaders
for Git/Hg/SVN. Integrates into mozart-registry via vcs_bridge module to
scan VCS repositories and feed discovered packages into the SAT resolver.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

1 files changed, 4 insertions, 2 deletions

diff --git a/Cargo.toml b/Cargo.toml
index 5d972b6..ecb0c67 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -16,8 +16,10 @@ mozart-registry = { path = "crates/mozart-registry" }
 mozart-sat-resolver = { path = "crates/mozart-sat-resolver" }
 mozart-semver = { path = "crates/mozart-semver" }
 mozart-spdx-licenses = { path = "crates/mozart-spdx-licenses" }
+mozart-vcs = { path = "crates/mozart-vcs" }
 anyhow = "1.0.102"
 assert_cmd = "2.1.2"
+base64 = "0.22.1"
 bzip2 = "0.5.2"
 clap = { version = "4.5.60", features = ["derive"] }
 clap_complete = "4.5.66"
@@ -31,16 +33,16 @@ proc-macro2 = "1.0.106"
 quote = "1.0.44"
 regex = "1.12.3"
 reqwest = { version = "0.13.2", features = ["json"] }
-url = "2"
 self-replace = "1.5.0"
 serde = { version = "1.0.228", features = ["derive"] }
 serde_json = "1.0.149"
 sha1 = "0.10.6"
 syn = { version = "2.0.117", features = ["full", "parsing"] }
 tar = "0.4.44"
-terminal_size = "0.4"
 tempfile = "3.25.0"
+terminal_size = "0.4.3"
 tokio = { version = "1.49.0", features = ["full"] }
 tracing = "0.1.44"
 tracing-subscriber = { version = "0.3.22", features = ["env-filter", "fmt"] }
+url = "2.5.8"
 zip = { version = "2.4.2", default-features = false, features = ["deflate"] }