Jamie Tanna authored Nov 21, 2023 and Jamie Tanna committed Nov 24, 2023

As part of #258, we can introduce the `policy evaluate` command to give
an indication of the impact of a given Policy being introduced.

This requires we:

- list all the repos and packages (so we can perform per-repo tuning of
  policies if needed) from Renovate and SBOM datasources
- evaluate the policy, across many Goroutines due to the expected size
  of the returned list of dependencies

Although the scope of #273 was for this to be a `--dry-run` flag, it
makes more sense to be by default.

Closes #273.