Refactor package loading process w provider pattern (the real MZAL)

[Noxsios]

Description

Big refactor in how packages are retrieved and loaded under the hood. This shift to an interface pattern allows for the same behavior to be exhibited by packages from a variety of sources. Feature parity is assured, and packages can be deployed, inspected, published, and removed via a reference to any source type.

The core + internally supported source types:

• OCI
• HTTP/HTTPS
• SGET (deprecated)
• Tarball (.tar.zst, .tar)
• Split Tarball

However, with the addition of WithSource(source sources.PackageSource) any library user of packager.New can create and set their own source. With this, any possible source can be supported: SSH sources, distributed packages, S3 buckets...

Additionally, there is current behavior that allows for the removeal of packages deployed, i.e. zarf package remove dos-games. This ability to specify a package via its name is now available on inspect: zarf package inspect dos-games. Inspecting / extracting SBOMs is currently a no-op as SBOMs are not persisted to the cluster.

Related Issue

Fixes #1832
Fixes #1943
Fixes #1757
Fixes #2029

Type of change

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Other (security config, docs update, etc)

Checklist before merging

• Test, docs, adr added or updated as needed
• Contributor Guide Steps followed

[netlify]

✅ Deploy Preview for zarf-docs canceled.

Name	Link
🔨 Latest commit	b1f49ad
🔍 Latest deploy log	https://app.netlify.com/sites/zarf-docs/deploys/651b361a617a2a00082fa802

[Racer159]

Small changes - overall very close

[Racer159]

lgtm