feat: add repo planning/binary repo support and Meson build integration

- add repos.toml source/binary repo configuration with arch overrides and priorities
- add dependency planner/execution plan flow with interactive provider selection and --yes support
- expand binary repo DB metadata (sha512, dependencies, file lists) and repo owns/search helpers
- add rootfs-scoped fd locking and minisign detached signing/verification helpers
- add Meson build/test support for the project with builddir-local CARGO_HOME/CARGO_TARGET_DIR
- install contrib example configs into sysconfdir (/etc/depot.d layout) via Meson
- improve builder env handling (sanitized PATH, tool env passthrough, CXXFLAGS support)
- support += appends in package specs and add build.flags.cxxflags parsing
- prompt for git credentials when private repo auth is required
- update docs/examples and dependency setup (system libs, zstdmt, tempfile pin)

contrib/README.md

@@ -1,7 +1,7 @@
 Contrib: example system and user configuration files for Depot
 
 Place these files on your system to provide sensible defaults and examples
-for `/etc/depot.toml`, `/etc/depot.d/build.toml`, or user-level configs.
+for `/etc/depot.toml`, `/etc/depot.d/*.toml`, or user-level configs.
 
 Recommended installation:
 
@@ -18,3 +18,5 @@ Notes
  - These files are examples only. Review and adapt to your distribution and
    security policies before deploying.
  - The config loader supports append syntax (e.g. `cflags += ["-g"]`).
+ - `contrib/depot.d/repos.toml` shows the new source/binary repo configuration
+   format used by `depot repo ...` commands.

contrib/depot.d/repos.toml

@@ -0,0 +1,26 @@
+[settings]
+prefer_binary = true
+
+[source.vertex]
+url = "https://gitlab.com/vertex-linux/packages.git"
+enabled = true
+priority = 50
+subdirs = ["core", "extra"]
+
+[binary.core]
+url = "https://repo.sfgos.net/core"
+enabled = true
+priority = 10
+repo_db = "repo.db.zst"
+
+[binary.core.arch.x86_64]
+enabled = true
+
+[binary.extra]
+url = "https://repo.sfgos.net/extra"
+enabled = true
+priority = 20
+repo_db = "repo.db.zst"
+
+[binary.extra.arch.x86_64]
+enabled = true