feat: add official resource sync pipeline

Add the production-facing official update service and bat-official-sync watch CLI for unattended resource synchronization.

Support launcher-resource discovery without installing the launcher, remote marker snapshots, local manifest audit and repair, official seed hash validation, bootstrap caching, richer Addressables coverage, SQLite resource persistence, and FFI JSON helpers.

infrastructure/Cargo.toml

@@ -5,6 +5,10 @@ edition.workspace = true
 authors.workspace = true
 license.workspace = true
 
+[[bin]]
+name = "bat-official-sync"
+path = "src/bin/bat_official_sync.rs"
+
 [dependencies]
 bat-core = { path = "../core" }
 bat-adapters = { path = "../adapters" }
@@ -13,11 +17,13 @@ anyhow.workspace = true
 thiserror.workspace = true
 serde.workspace = true
 serde_json.workspace = true
+blake3.workspace = true
 tokio.workspace = true
 async-trait.workspace = true
 md-5 = "0.10"
 hex = "0.4"
 tempfile = "3.14"
+sqlx = { version = "0.8", features = ["runtime-tokio", "sqlite"] }
 
 [dev-dependencies]
 tokio = { workspace = true, features = ["test-util", "macros"] }