feat(manifest): name JVM Socket facts files after their build

[Jeppe Fredsgaard Blaabjerg (jfblaa)]

LLM Description written by Claude Code:claude-opus-5-5

Follows #1589, #1590 and #1591, now in v1.x. Each Maven, Gradle and sbt build now writes its own Socket facts file instead of a shared .socket.facts.json, so builds sharing a directory (Gradle next to Maven, pom.xml next to other-pom.xml) no longer overwrite each other. depscan already accepts any *.socket.facts.json.

• File-addressed builds are named after the file the tool ran on: pom.xml.socket.facts.json, or other-pom.xml.socket.facts.json for mvn -f other-pom.xml. The Maven extension reports that entry POM. Future .NET support fits the same rule (Foo.sln.socket.facts.json).
• Directory-addressed builds are named after the tool: gradle.socket.facts.json, sbt.socket.facts.json.
• Direct dependencies reference the named file in manifestFiles.
• A leftover .socket.facts.json next to a newly written file triggers a warning.
• Since producers no longer write the bare name, reachability leaves an earlier .socket.facts.json report out of its input again, as it did before the facts producers existed. The post-scan deletion stays, since a scan without --reach would otherwise upload a stale report.

Dependencies

• Coana 15.12.4 (on v1.x) contains coana-tech/coana-package-manager#2545 (recognises named facts files, REA-894) and coana-tech/coana-package-manager#2547 (keys facts units by facts file, not directory).
• Named files upload uncompressed until depscan decompresses them (REA-895).

Testing

• Unit tests cover naming, placement and the facts-file references.
• Real runs of the full change: Maven (-f in the same directory and a subdirectory, two modules in one directory), Gradle (-p, :a:util/:b:util sharing a GAV), sbt, and recursive discovery with the sidecar.

🤖 Generated with Claude Code

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 2 potential issues.

^{Bugbot Autofix is ON. A cloud agent has been kicked off to fix the reported issues.}

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 649eb2f. Configure here.}

[Martin Torp (mtorp)]

Looks good ✅