Co-authored-by: Randy Döring <30527984+radoering@users.noreply.github.com>

Currently, poetry install will clone, build and install every git
dependency when it's not present in the environment. This is OK for
developer's machines, but not OK for CI - there environment is always
fresh, and installing git dependencies takes significant time on each CI
run, especially if the dependency has C extensions that need to be
built.

This commit builds a wheel for every git dependency that has precise
reference hash in lock file and is not required to be in editable mode,
stores that wheel in a cache dir and will install from it instead of
cloning the repository again.

Co-authored-by: Randy Döring <30527984+radoering@users.noreply.github.com>

(affects `poetry add` and `poetry update`)

Co-authored-by: Randy Döring <30527984+radoering@users.noreply.github.com>

* correct logger for publisher
* build 0.10.0 to get metadata in PackageInfo
* prefer pathlib
* passwords must be strings

Co-authored-by: Randy Döring <30527984+radoering@users.noreply.github.com>

Co-authored-by: Randy Döring <30527984+radoering@users.noreply.github.com>

The env keyword contains the modified path (that uses get_temp_environ)
so without it, anything using the `input` path here would get the wrong
env.

fixes python-poetry#7623

several versions of a package that does not have
its metada correctly declared.

* fix hash mismatch during installation with `no-binary` option for packages that provide suitable wheels
* do not skip hash check for sdists
* write hash for sdists in direct_url.json