New features

• Implement lock.json file for tracking DNF dependencies.

Improvements

• Use JCS (JSON Canonicalization Scheme) for lockfile storage.
• Move SDK bootstrap, rootfs install, and target-sysroot install to sdk install.
• Remove remaining bootstrap logic from container entrypoint.
• Preserve file attributes on extension overlay merging.
• Add warning output for config parsing errors.