feat: Scrape the whole MODULE file (#18)

Swap out looking at the versions of modules that opted into telemetry
for the versions of all modules from BCR.

Note that local/private modules and source overridden modules aren't
captured. We do detect BCR mirrors/rehosting and identify rehosted
packages.

### Changes are visible to end-users: yes

- Searched for relevant documentation and updated as needed: yes
- Breaking change (forces users to change their own code or config): no
- Suggested release notes appear below: no

### Test plan

- Manual testing; please provide instructions so we can reproduce:

```
❯ cat bazel-bin/report.json
{
  "tools_telemetry": {
    "arch": "aarch64",
    "bazel_version": "8.4.2",
    "bazelisk": true,
    "ci": false,
    "counter": null,
    "deps": {
      "bazel_features": "1.30.0",
      "bazel_lib": "3.0.0",
      "bazel_skylib": "1.8.1",
      "rules_android": "0.1.1",
      "rules_cc": "0.1.1",
      "rules_fuzzing": "0.5.2",
      "rules_java": "8.14.0",
      "rules_jvm_external": "6.3",
      "rules_kotlin": "1.9.6",
      "rules_license": "1.0.0",
      "rules_pkg": "1.0.1",
      "rules_proto": "7.0.2",
      "rules_python": "0.40.0",
      "rules_shell": "0.4.1"
    },
    "has_bazel_module": true,
    "has_bazel_prelude": false,
    "has_bazel_tool": false,
    "has_bazel_workspace": true,
    "id": "11e79f7905b252a08bc51ed59f3a8360b0b72eab",
    "org": null,
    "os": "mac os x",
    "runner": null,
    "shell": "/bin/zsh",
    "user": "43d65459434f0929abcb0605c59cf65093670ce5"
  }
}%
```

Author: arrdem

MODULE.bazel.lock

@@ -171,9 +171,35 @@ tel_repository = repository_rule(
 
 
 def _tel_impl(module_ctx):
+    lock_content = json.decode(module_ctx.read(module_ctx.path(Label("@@//:MODULE.bazel.lock"))))
+    raw_deps = lock_content.get("registryFileHashes", {})
+    registries = [
+        it.replace("/bazel_registry.json", "/modules/") for it in raw_deps.keys()
+        if it.endswith("/bazel_registry.json")
+    ]
+    deps = {}
+    for url, _sha in raw_deps.items():
+        if not url.endswith("/source.json"):
+            continue
+
+        # https://bcr.bazel.build/modules/jsoncpp/1.9.5/source.json
+
+        url = url.replace("/source.json", "")
+
+        # https://bcr.bazel.build/modules/jsoncpp/1.9.5
+        
+        for registry in registries:
+            url = url.replace(registry, "")
+
+        # jsoncpp/1.9.5
+
+        if "/" in url:
+            pkg, rev = url.split("/", 1)                
+            deps[pkg] = rev
+
     tel_repository(
         name = "aspect_tools_telemetry_report",
-        deps = {it.name: it.version for it in module_ctx.modules}
+        deps = deps
     )
 
 # TODO: Should the extension in the main module be able to set telemetry feature