use idiomatic location for security directory and update location of configuration directory

[tomerd]

motivation: use idiomatic location for security directory on macOS

changes:

• allow users to customize security directory location with new --security-path CLI option
• on macOS use /Library/org.swiftpm/security for security files and symlink from ~/.swiftpm/security
• move configuration directory from /Library/org.swiftpm to /Library/org.swiftpm/configuration
• add migration code from old configuraiton location to new one
• add and adjust tests
• update docker setup for new locations

[neonichu]

We're talking about ~/Library/org.swift.swiftpm, right? Or are we creating a second location?

[yim-lee]

Let's make sure source compat test passes before merging?

We can use: swiftlang/swift#40524

[tomerd]

@swift-ci please smoke test

[tomerd]

@yim-lee revised per discussion + addressed other comments

[tomerd]

We're talking about ~/Library/org.swift.swiftpm, right? Or are we creating a second location?

@neonichu @abertelrud we have been using ~/Library/org.swift.swiftpm for configuration files thus far, in practice only for storing collections.json. With the new TOFU feature now need a location for security related files. As such, this PR transitions the configuration files to ~/Library/org.swift.swiftpm/configuration and uses ~/Library/org.swift.swiftpm/security for the latter.

note the migration code does not delete / move the old files, it copies them from ~/Library/org.swift.swiftpm into ~/Library/org.swift.swiftpm/configuration such that moving back to older toolchain/Xcode does not break (although they would use different copies).

on non-Darwin platform this moves the configuration files from ~/.swiftpm/config to ~/.swiftpm/configuration so that the names are aligned on all platforms, this is done with similar preservation of old files for the same reason.

one nice thing with this is that it also matched the changes we made earlier this year moving the "local" (package root) <package-root>/.swiftpm/config file into <package-root>/.swiftpm/configuration/mirrors.json

wdyt?

[tomerd]

@swift-ci please smoke test

[tomerd]

Let's make sure source compat test passes before merging?

that test passed, so we should be good

[neonichu]

We have to make sure that users understand that there are two different config files, right now we're only warning one time on copy, correct? I think we need to warn on load as long as both locations exist.

[tomerd]

We have to make sure that users understand that there are two different config files, right now we're only warning one time on copy, correct? I think we need to warn on load as long as both locations exist.

2ba88d3

[tomerd]

@swift-ci please smoke test