feat!: publish v1beta1 component configs

[AustinAbro321]

Description

Implements publishing for v1beta1 component configs.

There are a few notable decisions here:

• ComponentConfigs now have a .Metadata.variant.Architecture and .Metadata.variant.Flavor field and lose the selector. See ZEP-0051: move selectors to variants on component config proposals#68
• Component configs can be signed as regular OCI objects. Since they only have a remote representation, they won't have a checksums.txt
• Files are copied to the OCI cache, but also duplicated on import, this takes up more space than skeleton packages. I think we could improve this in the future by hard linking the filepaths to the cache, but we'll want pkg/oci to expose the Cachepath() for a clean interface.
• Image archives now accept a either a tar file or a directory of an oci layout. This eliminated the need to compress archives from skeleton packages before pulling the image in.
• OnCreate actions are not allowed in remote components. We can reconsider this later, or even run them on publish, but this prevents running host actions when importing a remote component.

Breaking changes

The core of the breaking changes in this PR was to decouple the path to the package after loading is done. A new object load.ResourceSet knows how get any resource from the package given it's entry in the package spec.

• load.PackageDefinition now returns api.PackageDefinition instead of load.ResolvedPackage, and does not pull remote resources or resolve values schemas; use load.Package when resolved resources, values, or schemas are needed.
• load.ResolvedPackage now exposes Definition, Resources, Values, and ValuesSchema. It must be passed by pointer and closed with Close() after use.
• assemble.AssemblePackage changed from (ctx, resolvedPackage, packagePath, opts) to (ctx, *resolvedPackage, opts).
• assemble.AssembleSkeleton changed from (ctx, resolvedPackage, packagePath, opts) to (ctx, *resolvedPackage, opts).
• assemble.PackageManifest and assemble.PackageChart now take *load.ResourceSet instead of a package-root path string.

Related Issue

Relates to #5165

Checklist before merging

• Test, docs, adr added or updated as needed
• Contributor Guide Steps followed

[netlify]

✅ Deploy Preview for zarf-docs canceled.

Name	Link
🔨 Latest commit	02ca3c4
🔍 Latest deploy log	https://app.netlify.com/projects/zarf-docs/deploys/6a8f3762788cbf00082ee313

[brandtkeller]

lgtm