feat: vendor/scan/apply overhaul — lockfile-driven discovery, verified auto-fetch, mismatch-tolerant apply #325

Job	Run time
lint-ecosystems	5s
dispatch-tests	10s
test-release	19m 43s
test (macos-latest)	6m 44s
clippy	20s
test (windows-latest)	20m 25s
e2e-docker (golang)	4m 6s
e2e-docker (npm)	4m 8s
test (ubuntu-latest)	7m 57s
e2e-docker (pypi)	4m 25s
e2e-docker (nuget)	4m 5s
coverage-docker (pypi)	5m 22s
setup-matrix (maven)	4m 31s
coverage	6m 4s
coverage-docker (maven)	5m 32s
e2e-docker (maven)	4m 36s
e2e-docker (cargo)	4m 30s
e2e-docker (composer)	3m 59s
coverage-docker (golang)	4m 56s
e2e-docker (gem)	4m 11s
setup-matrix (cargo)	3m 2s
setup-matrix (golang)	2m 48s
coverage-docker (cargo)	5m 15s
setup-matrix (npm)	3m 54s
setup-matrix (pypi)	4m 13s
coverage-docker (deno)	5m 8s
coverage-docker (nuget)	5m 13s
coverage-docker (npm)	5m 10s
setup-matrix (gem)	3m 0s
coverage-docker (composer)	5m 1s
coverage-docker (gem)	5m 26s
setup-matrix (composer)	3m 14s
e2e-docker (deno)	4m 27s
setup-matrix (deno)	3m 7s
setup-matrix (nuget)	3m 20s
coverage-merge	0s
e2e (ubuntu-latest, e2e_safety_cargo_build)	29s
e2e (ubuntu-latest, e2e_maven)	29s
e2e (ubuntu-latest, e2e_cargo)	25s
e2e (macos-latest, e2e_safety_pnpm)	59s
e2e (ubuntu-latest, e2e_golang)	28s
e2e (ubuntu-latest, e2e_safety_pnpm)	34s
e2e (macos-latest, e2e_safety_cargo_build)	41s
e2e (ubuntu-latest, e2e_composer)	26s
e2e (ubuntu-latest, e2e_nuget)	28s
e2e (windows-latest, e2e_safety_pnpm)	3m 21s
e2e (windows-latest, e2e_safety_cargo_build)	3m 38s
	3h 10m 5s

Provide feedback