VolmLib pin removal

- The build resolves VolmLib master-SNAPSHOT when no sibling checkout is substituted
- The native runtime manifest, roots and keep rules come from the embedded natives
- The packed jar natives are verified against the embedded provider shas
- Every jar carries META-INF/volmit/volmlib.properties
- The build logs the resolved VolmLib once
- publishedNativeRuntime, the loader coordinate flags, mavenLocal and publish-volmlib are gone

buildSrc/build.gradle

@@ -32,6 +32,7 @@ dependencies {
     implementation(gradleApi())
     implementation('org.ow2.asm:asm:9.10.1')
     implementation('org.apache.commons:commons-compress:1.28.0')
+    implementation('org.tukaani:xz:1.10')
     implementation('io.papermc.paperweight:paperweight-userdev:2.0.0-beta.21')
     testImplementation('junit:junit:4.13.2')
 }