Download compatibility profiles lazily from a remote feed rather than shipping them

Currently compatibility profiles for the UseCompatibleTypes and UseCompatibleCommands rules ship with PSSA and effectively double its size.

This represents large overhead for users who don't use these rules or who don't want all the profiles we ship by default.

Ideally the rules should have a way of identifying filesystem and remote assets, and when rules are run, download/install any remote assets not already on the machine. This will also require cataloguing remote assets in a systematic and dependable way.

Proposed implementation

One solution is to have rules as NuGet assets (taking care of both hosting and caching), and specifying profiles as URIs, so that file:// and https:// (for example) profiles can be easily distinguished.

This may create an unnecessary dependency on NuGet however.

Whatever the implementation it will need to:

• Enable runtime retrieval of profiles so they do not need to be shipped with the PSSA module
• Allow side-by-side specification of remote and local profiles in the configuration in a way where local assets cannot have colliding names
• Memoise profile downloads, so that once they are downloaded once, they remain available locally by specifying the remote instance (this may require versioning or cache invalidation in case remote profiles change)
• Allow profiles to be downloaded in batches rather than one-at-a-time, for maximum efficiency (in the vein of the Remote Façade pattern.

檢視 UseCompatibleTypes 和 UseCompatibleCommands 規則，以及它們的設定檔目前如何封裝和設定。將資產來源、快取與版本控制、本機名稱衝突及批次下載需求對應到設計中。完成表示已針對列出的執行階段擷取與共存行為完成規格定義及驗證。