Pin mesh-sdk at 14fd5cb6 (R4a's merge) and take the catalogue, overlay and validator from it, s to inventory (issue 1381, 4 of 6 import swaps)

go.mod and go.sum move to mesh-sdk 14fd5cb68fd1, the commit on its main that holds go/catalogue, go/overlay and go/validate (ADR 0453 clause 2); vendor/modules.txt follows in the last of the six commits.

internal/artifacts/hold.go

@@ -13,7 +13,7 @@ import (
 	"strings"
 	"time"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // Every archive the store keeps is held by a manifest (novox/hq issue 253, ADR 0189).

internal/artifacts/hold_test.go

@@ -16,7 +16,7 @@ import (
 	"sync"
 	"testing"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // Every kept archive is held by a manifest (novox/hq issue 253, ADR 0189).

internal/artifacts/live_registry_test.go

@@ -14,7 +14,7 @@ import (
 	"testing"
 	"time"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // The registry's own collector keeps a held archive and takes a bare one (novox/hq issue 253,

internal/artifacts/platforms_test.go

@@ -11,7 +11,7 @@ import (
 	"sync"
 	"testing"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // An index is let go of with the platform manifests it names, except those a kept index of the same

internal/artifacts/store.go

@@ -16,7 +16,7 @@ import (
 	"net/http"
 	"strings"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // Store is the artifact store at an address, as this machine reaches it.

internal/artifacts/store_test.go

@@ -8,7 +8,7 @@ import (
 	"strings"
 	"testing"
 
-	"github.com/novox/mesh-controller/internal/catalogue"
+	"git.novox.be/novox/mesh-sdk/go/catalogue"
 )
 
 // Asking the store to let go of what the mesh no longer keeps (novox/hq ADR 0189, issue 108).