feat: vendor/scan/apply overhaul — lockfile-driven discovery, verified auto-fetch, mismatch-tolerant apply - #115

Click through to the see the full socket security project report page for this commit to see information about every dependency in this project.