feat!: rewrite getter as package-centric CLI core

[xz-dev]

Summary

• Rewrite getter as a reusable package-centric Rust core/CLI spine for the UpgradeAll Flutter app + Rust getter + Lua package repository architecture.
• Add readable package IDs, repository layout loading, Lua JSON-like package evaluation/validation, SQLite main/cache storage, legacy Room/bridge import, sanitized migration report listing, repository overlay resolution, update selection helpers, and cache/version-baseline support.
• Add ADR-0010 pin_version storage/update semantics: pin_version is an effective local comparison baseline, while legacy ignored_version / Room ignore_version_number / mark_version_number remain only at import/compatibility boundaries.
• Add ADR-0011 in-memory runtime/task/action support: GetterRuntime, single-use opaque action_id, sealed action plans, bound package-version Lua object, mock download/install phases, user-result, package lock, task controls, remove/clean, and RuntimeNotification snapshots.
• Expose shared JSON operation seams for legacy Room, installed autogen, read-model snapshots, offline/registered-package update action issuance, and runtime task controls without reintroducing persisted task state.
• Add runtime script --script <script.json> as the single-process CLI debug harness for ADR-0011 runtime coverage, and move the old persisted fake downloader commands out of the public task ... namespace into development-only debug fake-task ....
• Wrap static Lua updates candidates behind getter-providers::StaticPackageUpdatesProvider as a mock-provider boundary; live provider/network execution remains deferred.
• Keep require("lib.xxx") constrained to repository lib/ modules without exposing repository root/current-directory modules.
• Split feature flags so Android JNI/API proxy consumers can depend on getter without pulling unwanted Lua/domain dependencies when not requested.

Architecture notes

• This branch intentionally moves toward the app-centric Lua package repository model consumed by DUpdateSystem/UpgradeAll.
• The old hub-app model is not restored; compatibility commands remain compatibility-only.
• Product task state is process-memory runtime state only per ADR-0011: no task SQLite persistence, no daemon, and no cross-invocation CLI task memory.
• Public product task submission uses getter-issued opaque action_id; Flutter/native callers must not assemble action payloads.
• Registered-package action issuance currently uses static Lua updates through a mock-provider boundary. Real live provider/downloader/installer semantics are deferred to later ADRs.
• Migration reports returned by legacy report-list are sanitized summaries, not raw filesystem/report internals.

Validation

Recent local validation on the current branch head 60a6515 feat(operations): expose read model operations includes:

• cargo fmt
• cargo test -p getter-cli --lib
• cargo test -p getter-cli --test bdd_cli
• cargo test -p getter-core update
• cargo test -p getter-storage
• cargo test -p getter-providers
• cargo test -p getter-operations --features lua
• cargo test -p getter-operations --features lua runtime
• cargo test -p getter-operations --features lua read_model
• cargo test --manifest-path ../api_proxy/Cargo.toml --lib runtime_dispatcher
• cargo test --manifest-path ../api_proxy/Cargo.toml --lib read_operation
• cargo check -p getter-core --no-default-features
• cargo check -p getter-operations
• cargo check -p getter-operations --features lua
• Android/API-proxy checks through the UpgradeAll superproject just verify-workspace-skeleton with JAVA_HOME=/opt/android-studio/jbr and ANDROID_NDK_HOME=/home/xz/.local/share/Google/Android/Sdk/ndk/29.0.14206865.

Consumed by

• UpgradeAll PR: feat: add Flutter getter rewrite spine UpgradeAll#514
• Current superproject branch points at this branch head through the core-getter/src/main/rust/getter git submodule.

Deferred work / non-goals

• Live HTTP/provider execution as product default.
• Real downloader/background worker/restart/resume behavior.
• Android installer/SAF/FileProvider/Shizuku/root/system-notification semantics.
• Durable task event log or cross-process runtime task recovery.

Notes

• Commits on this branch are intentionally unsigned for the current stage.