Initial dependency lock work

[stuartwdouglas]

No description provided.

[openshift-ci]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[codecov]

Codecov Report

Attention: Patch coverage is 0% with 86 lines in your changes are missing coverage. Please review.

Project coverage is 43.35%. Comparing base (108667f) to head (60420a4).
Report is 8 commits behind head on main.

Files	Patch %	Lines
...hacbs/container/hermetic/DownloadDependencies.java	0.00%	51 Missing ⚠️
...cbs/container/hermetic/GenerateDependencyList.java	0.00%	35 Missing ⚠️

Additional details and impacted files

@@             Coverage Diff              @@
##               main    #1653      +/-   ##
============================================
- Coverage     43.71%   43.35%   -0.36%     
  Complexity      773      773              
============================================
  Files           274      276       +2     
  Lines         11640    11728      +88     
  Branches       1384     1397      +13     
============================================
- Hits           5088     5085       -3     
- Misses         5945     6035      +90     
- Partials        607      608       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.