Add an additional Trivy execution that raises an error on HIGH and CRITICAL vulnerabilities.
It also uploads the vulnerability report to the CI run and the GitHub Security dashboard.

This PR makes the suites attribute of archives in the chisel.yaml mandatory. All other attributes are already mandatory (version, components and keys).

There was an old fallback logic which would set suites to the release adjective if left unset, but this logic was only configured for 4 ubuntu releases, one of which (bionic) is no longer supported by chisel, and all other three have their suites properly configured in their chisel.yaml already, so this piece of logic never triggers (focal, jammy, kinetic).

This commit adds support for fetching packages from multiple archives. It introduces a new field archives.<archive-name>.priority which takes in a signed integer and specifies the priority of a certain archive. A package is fetched from the archive with highest priority and negative priorities are ignored unless explicitly pinned in a package.

The concept of default archive in chisel.yaml is now deprecated. However, the field can still be present and it will be parsed and interpreted in a compatible way for the time being.

DEPRECATED: "archives.*.default" field in chisel.yaml.

In chisel.yaml, archive definitions can now use the "pro" value to
specify Ubuntu Pro archives. The `archives.<name>.pro` value
currently accepts the following values: "fips", "fips-updates", "esm-apps"
and "esm-infra". Any other values are ignored.

By default, Chisel will look for credentials in the
`/etc/apt/auth.conf.d/` directory, unless the environment variable
`CHISEL_AUTH_DIR` is set. In which case, it will look for
configuration files in that directory. The configuration files may only
have the ".conf" extensions or no extensions, the format is described
in https://manpages.debian.org/testing/apt/apt_auth.conf.5.en.html.

Co-authored-by: Rafid Bin Mostofa <rafid.mostofa@canonical.com>

This commits introduces a new flag for fsutil.Create called OverrideMode which updates the mode of existing entries. It is used to ensure that the explicit folder overrides the permissions of the implicit ones.

Co-authored-by: Rafid Bin Mostofa <rafid.mostofa@canonical.com>

Removes the usage from snap description.

Resolves #164.

Also consider Generate in yamlPath.SameContent. Implementation does not touch this right now.

Co-authored-by: Alberto Carretero

"v2-archives" is used for backwards compatibility with Chisel <= 1.0.0
since it will be ignored. In new versions, it will be parsed with the new
fields that break said compatibility, e.g. "pro" archives.

Co-authored-by: Rafid Bin Mostofa <rafid.mostofa@canonical.com>

Results of the benchmark on my machine (using hyperfine with 10 rounds).

Basically, HEAD takes 5.341s on my machine compared to 18.366s for main.

$ bash benchmark.sh HEAD main 
Creating rev: e2ee603 (main)
Creating rev: 1982979 (HEAD)
Benchmark 1: ./19829794e6454f78334c9a67b74d8abb9bc66b25 info --release ../chisel-releases/ubuntu-24.04 'python3.12_core'
  Time (mean ± σ):      5.341 s ±  0.115 s    [User: 5.528 s, System: 0.028 s]
  Range (min … max):    5.239 s …  5.635 s    10 runs
 
Benchmark 2: ./e2ee603c7396b33038e47352c0722b5b1202fbfe info --release ../chisel-releases/ubuntu-24.04 'python3.12_core'
  Time (mean ± σ):     18.366 s ±  0.139 s    [User: 19.677 s, System: 0.103 s]
  Range (min … max):   18.219 s … 18.675 s    10 runs
 
Summary
  ./19829794e6454f78334c9a67b74d8abb9bc66b25 info --release ../chisel-releases/ubuntu-24.04 'python3.12_core' ran
    3.44 ± 0.08 times faster than ./e2ee603c7396b33038e47352c0722b5b1202fbfe info --release ../chisel-releases/ubuntu-24.04 'python3.12_core'