refactor!: reorganize auth and credential

[TerryHowe]

I have some features/changes I'd like to make to oras-go and this relationship between auth and credentials often gets in the way. This change makes auth dependent on credentials instead of the other way around.

• Created configuration package for configuration file/directory parsing
• Created properties package for remote registry properties that are agnostic to the source or use of the data

Partial: #836 (parses auth config json)

[codecov]

Codecov Report

❌ Patch coverage is 89.10891% with 11 lines in your changes missing coverage. Please review.
✅ Project coverage is 82.40%. Comparing base (42c1a3a) to head (344be77).
⚠️ Report is 1 commits behind head on main.

Files with missing lines	Patch %	Lines
...gistry/remote/internal/configuration/authconfig.go	65.00%	6 Missing and 1 partial ⚠️
registry/remote/credentials/credential.go	82.60%	4 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1006      +/-   ##
==========================================
- Coverage   82.59%   82.40%   -0.19%     
==========================================
  Files          64       66       +2     
  Lines        4779     4791      +12     
==========================================
+ Hits         3947     3948       +1     
- Misses        509      519      +10     
- Partials      323      324       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

Pull Request Overview

This pull request refactors the authentication and credential management system in oras-go by reorganizing the package structure to make auth dependent on credentials instead of the other way around.

• Moved credential types and functions from auth package to credentials package
• Updated all imports and references to use the new package structure
• Consolidated example functions to avoid duplication

Reviewed Changes

Copilot reviewed 23 out of 24 changed files in this pull request and generated 14 comments.

Show a summary per file

File	Description
registry/remote/example_test.go	Added credential store example functions moved from the credentials package
registry/remote/credentials/trace/example_test.go	Updated import path and credential type reference
registry/remote/credentials/store_test.go	Added testStore implementation and updated all credential type references
registry/remote/credentials/store.go	Updated import paths and credential type references
registry/remote/credentials/native_store_test.go	Updated credential type references throughout test cases
registry/remote/credentials/native_store.go	Updated credential type references and removed auth package import
registry/remote/credentials/memory_store_test.go	Updated credential type references throughout test cases
registry/remote/credentials/memory_store_from_config_test.go	Updated credential type references and import paths
registry/remote/credentials/memory_store.go	Updated credential type references and removed auth package import
registry/remote/credentials/file_store_test.go	Updated credential type references and import path
registry/remote/credentials/file_store.go	Updated credential type references and removed auth package import
registry/remote/credentials/example_test.go	Removed entire file (examples moved to remote package)
registry/remote/credentials/credential_test.go	Added comprehensive tests for new credential types and functions
registry/remote/credentials/credential.go	Moved from auth package, now contains core credential types and functions
registry/remote/credentials/config_test.go	Updated package declaration and all credential type references
registry/remote/credentials/config.go	Updated package declaration and credential type references
registry/remote/auth_test.go	Updated package declaration and credential type references
registry/remote/auth/example_test.go	Updated import paths and credential type references
registry/remote/auth/client_test.go	Updated credential type references throughout
registry/remote/auth/client.go	Updated credential type references and removed duplicate functions
registry/remote/auth.go	Updated package declaration and credential type references
example_test.go	Updated credential type references in examples
example_copy_test.go	Updated credential type references

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[shizhMSFT]

This PR definitely introduces breaking changes and thus not suitable for the current v2 version.

[TerryHowe]

This PR definitely introduces breaking changes and thus not suitable for the current v2 version.

Yes. Do you want to target another branch?

Also, it would be convenient to have a patch release of oras-go since there are a couple unreleased fixes that would be nice to have out there.

[TerryHowe]

All those copilot comments were wrong #1020 would probably help

[Wwwsylvia]

Yes. Do you want to target another branch?

@shizhMSFT @TerryHowe Should we create a v3 branch? But we’d need to sync bug fixes and features into it going forward. I'm not sure if now is the right time.

[Wwwsylvia]

Also, it would be convenient to have a patch release of oras-go since there are a couple unreleased fixes that would be nice to have out there.

There are only two fixes: v2.6.0...main
Does it block Helm?

[Copilot]

Pull Request Overview

Copilot reviewed 23 out of 24 changed files in this pull request and generated no new comments.

[TerryHowe]

The last commit consolidates all the AuthConfig logic to that one file in internal/configuration

[Copilot]

Pull Request Overview

Copilot reviewed 24 out of 36 changed files in this pull request and generated 1 comment.

[TerryHowe]

Last push was just a rebase and fixed conflicts

[shizhMSFT]

@TerryHowe They are PRs depending each other. Could you suggest the order of PR to be reviewed?

[TerryHowe]

This PR and following are NOT dependent on this:

• feat: add ParseReferenceList method #1045
• feat!: add support for tag and digest in Reference #1042
• feat!: remove ForceAttemptOAuth2 add SetLegacyMode to auth client #1038
• feat(remote): add support for policy.json allow/deny #1013

[sabre1041]

Looks good. One small change requested as there is a documentation reference that needs to be updated

[sabre1041]

LGTM

Fixed