feat: Advanced marketplace features (marketplace-02) - dependency resolution, aliases, custom registries, publishing

[djm81]

Description

Implements OpenSpec change marketplace-02-advanced-marketplace-features: dependency resolution, command aliases, custom registries, namespace enforcement, and module publishing automation.

Summary:

• Dependency resolution: specfact module install resolves pip_dependencies and module_dependencies; --skip-deps and --force flags.
• Command aliases: specfact module alias create/list/remove (aliases do not create top-level CLI commands).
• Custom registries: add-registry, list-registries, remove-registry; search across all registries with Registry column.
• Namespace enforcement: Marketplace modules must use namespace/name; collision detection with clear guidance.
• Publishing: scripts/publish-module.py and .github/workflows/publish-modules.yml (optional signing via SPECFACT_MODULE_PRIVATE_SIGN_KEY / PASSPHRASE).
• Docs: New guides publishing-modules.md, custom-registries.md, reference dependency-resolution.md; updated installing-modules, module-marketplace, module-signing, commands reference.
• Version: 0.38.0; CHANGELOG updated.

Contract References: @icontract and @beartype on dependency_resolver, alias_manager, custom_registries, module_installer (namespace/validation), publish-module.py helpers.

Type of Change

• New feature (non-breaking change which adds functionality)
• Documentation update
• Contract enforcement (adding/updating @icontract decorators)
• Test enhancement

Contract-First Testing Evidence

• Runtime contracts added/updated
• Type checking enforced
• Contract validation / exploration / scenario tests / full suite pass

How Has This Been Tested?

Unit tests for dependency_resolver, alias_manager, custom_registries; module_installer namespace and install flags; module_registry test_commands (fetch_all_indexes, install mocks); migration and command_registry. Manual CLI verification. Type-check 0 errors.

Checklist

• Style guidelines, self-review, contracts, docstrings, documentation, no new warnings, tests pass, tests added

Quality Gates Status

• Type checking, Linting, Contract validation, Contract exploration, Scenario tests