locking: enforce Bzlmod lockfile consistency

[dcalavrezo-qorix]

add reusable lockfile check workflow

track MODULE.bazel.lock (remove from .gitignore)

enforce --lockfile_mode=error in CI and scripts

Addresses eclipse-score/score#2628

[github-actions]

License Check Results

🚀 The license check job ran with the Bazel command:

bazel run //:license-check

Status: ⚠️ Needs Review

Click to expand output

[License Check Output]
Starting local Bazel server (8.3.0) and connecting to it...
INFO: Invocation ID: a00c4c3e-2a25-4c62-b740-1e42ace02f8c
Computing main repo mapping: 
Computing main repo mapping: 
DEBUG: Rule 'rules_boost+' indicated that a canonical reproducible form can be obtained by modifying arguments integrity = "sha256-LTilyiMMjpYyAi1PW+8RycyAEHy9clo7915R0Bchb2E="
DEBUG: Repository rules_boost+ instantiated at:
  <builtin>: in <toplevel>
Repository rule http_archive defined at:
  /home/runner/.bazel/external/bazel_tools/tools/build_defs/repo/http.bzl:394:31: in <toplevel>
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
WARNING: For repository 'googletest', the root module requires module version googletest@1.17.0, but got googletest@1.17.0.bcr.2 in the resolved dependency graph. Please update the version in your MODULE.bazel or set --check_direct_dependencies=off
Computing main repo mapping: 
Loading: 
Loading: 4 packages loaded
Loading: 4 packages loaded
    currently loading: 
Analyzing: target //:license-check (5 packages loaded, 0 targets configured)
Analyzing: target //:license-check (5 packages loaded, 0 targets configured)

Analyzing: target //:license-check (18 packages loaded, 9 targets configured)

Analyzing: target //:license-check (69 packages loaded, 9 targets configured)

Analyzing: target //:license-check (89 packages loaded, 9 targets configured)

Analyzing: target //:license-check (94 packages loaded, 9 targets configured)

Analyzing: target //:license-check (150 packages loaded, 1149 targets configured)

Analyzing: target //:license-check (150 packages loaded, 1149 targets configured)

Analyzing: target //:license-check (150 packages loaded, 1149 targets configured)

Analyzing: target //:license-check (159 packages loaded, 3164 targets configured)

Analyzing: target //:license-check (172 packages loaded, 3417 targets configured)

Analyzing: target //:license-check (172 packages loaded, 3419 targets configured)

Analyzing: target //:license-check (172 packages loaded, 3419 targets configured)

Analyzing: target //:license-check (173 packages loaded, 3421 targets configured)

Analyzing: target //:license-check (175 packages loaded, 5308 targets configured)

Analyzing: target //:license-check (175 packages loaded, 5308 targets configured)

Analyzing: target //:license-check (182 packages loaded, 5646 targets configured)
[3 / 15] checking cached actions
INFO: From Generating Dash formatted dependency file ...:
INFO: Successfully converted 244 packages from Cargo.lock to bazel-out/k8-fastbuild/bin/formatted.txt
Analyzing: target //:license-check (204 packages loaded, 5744 targets configured)
[14 / 17] JavaToolchainCompileClasses external/rules_java+/toolchains/platformclasspath_classes; 1s disk-cache, processwrapper-sandbox
Analyzing: target //:license-check (204 packages loaded, 5744 targets configured)
[15 / 17] JavaToolchainCompileBootClasspath external/rules_java+/toolchains/platformclasspath.jar; 0s disk-cache, processwrapper-sandbox
Analyzing: target //:license-check (204 packages loaded, 5744 targets configured)
[16 / 17] Building license.check.license_check.jar (); 0s disk-cache, multiplex-worker
Analyzing: target //:license-check (204 packages loaded, 5744 targets configured)
[17 / 17] no actions running
Analyzing: target //:license-check (205 packages loaded, 10078 targets configured)
[17 / 17] no actions running
INFO: Analyzed target //:license-check (205 packages loaded, 10078 targets configured).
INFO: Found 1 target...
Target //:license.check.license_check up-to-date:
  bazel-bin/license.check.license_check
  bazel-bin/license.check.license_check.jar
INFO: Elapsed time: 34.723s, Critical Path: 3.61s
INFO: 17 processes: 12 internal, 4 processwrapper-sandbox, 1 worker.
INFO: Build completed successfully, 17 total actions
INFO: Running command line: bazel-bin/license.check.license_check ./formatted.txt <args omitted>
usage: org.eclipse.dash.licenses.cli.Main [-batch <int>] [-cd <url>]
       [-confidence <int>] [-ef <url>] [-excludeSources <sources>] [-help] [-lic
       <url>] [-project <shortname>] [-repo <url>] [-review] [-summary <file>]
       [-timeout <seconds>] [-token <token>]

[github-actions]

The created documentation from the pull request is available at: docu-html

[masc2023]

done here #89