Preparing support for cooldown in Clyde

Supply chain attacks are becoming more and more widespread these days. Since Clyde lets you install apps freshly published by their original authors, it could propagate a rogue release. A simple way to mitigate this risk is to implement dependency cooldowns : a period of time (usually a few days) between the time a new version of a package is published and the time it can be installed via the…