Download compatibility profiles lazily from a remote feed rather than shipping them

Currently compatibility profiles for the UseCompatibleTypes and UseCompatibleCommands rules ship with PSSA and effectively double its size.

This represents large overhead for users who don't use these rules or who don't want all the profiles we ship by default.

Ideally the rules should have a way of identifying filesystem and remote assets, and when rules are run, download/install any remote assets not already on the machine. This will also require cataloguing remote assets in a systematic and dependable way.

Proposed implementation

One solution is to have rules as NuGet assets (taking care of both hosting and caching), and specifying profiles as URIs, so that file:// and https:// (for example) profiles can be easily distinguished.

This may create an unnecessary dependency on NuGet however.

Whatever the implementation it will need to:

• Enable runtime retrieval of profiles so they do not need to be shipped with the PSSA module
• Allow side-by-side specification of remote and local profiles in the configuration in a way where local assets cannot have colliding names
• Memoise profile downloads, so that once they are downloaded once, they remain available locally by specifying the remote instance (this may require versioning or cache invalidation in case remote profiles change)
• Allow profiles to be downloaded in batches rather than one-at-a-time, for maximum efficiency (in the vein of the Remote Façade pattern.

审查 UseCompatibleTypes 和 UseCompatibleCommands 规则，以及它们的配置文件当前是如何打包和配置的。将资产源、缓存和版本控制、本地名称冲突以及批量下载的要求映射到设计中。完成意味着已对列出的运行时获取和共存行为进行规范说明和验证。