repositories: new class LockfileRepository that can distinguish direct origin dependencies with same name and version

This change allows certificates.<repo>.cert configuration to accept
boolean values in addition to certificate paths. This allows for
repositories to skip TLS certificate validation for cases where
self-signed certificats are used by package sources.

In addition to the above, the certificate configuration handling has
now been delegated to a dedicated dataclass.

Co-authored-by: Celeborn2BeAlive <laurent.noel.c2ba@gmail.com>
Co-authored-by: Maayan Bar <maayanbar13@gmail.com>

Co-authored-by: Bjorn Neergaard <bjorn@neersighted.com>

* add docs for multiple maintainers example