locking: enforce Bzlmod lockfile consistency

[dcalavrezo-qorix]

• add reusable lockfile check workflow

• track MODULE.bazel.lock (remove from .gitignore)

• enforce --lockfile_mode=error in CI and scripts

[github-actions]

License Check Results

🚀 The license check job ran with the Bazel command:

bazel run //:license-check

Status: ⚠️ Needs Review

Click to expand output

[License Check Output]
2026/03/05 12:12:50 Downloading https://releases.bazel.build/8.3.0/release/bazel-8.3.0-linux-x86_64...
Extracting Bazel installation...
Starting local Bazel server (8.3.0) and connecting to it...
INFO: Invocation ID: 2d7f030b-7c43-471e-9cdc-661d09a87dfb
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Computing main repo mapping: 
Loading: 
Loading: 0 packages loaded
Loading: 0 packages loaded
Loading: 0 packages loaded
    currently loading: 
Loading: 0 packages loaded
    currently loading: 
Analyzing: target //:license-check (1 packages loaded, 0 targets configured)
Analyzing: target //:license-check (1 packages loaded, 0 targets configured)

Analyzing: target //:license-check (14 packages loaded, 9 targets configured)

Analyzing: target //:license-check (77 packages loaded, 9 targets configured)

Analyzing: target //:license-check (79 packages loaded, 9 targets configured)

Analyzing: target //:license-check (95 packages loaded, 34 targets configured)

Analyzing: target //:license-check (145 packages loaded, 1005 targets configured)

Analyzing: target //:license-check (148 packages loaded, 2780 targets configured)

Analyzing: target //:license-check (149 packages loaded, 2789 targets configured)

Analyzing: target //:license-check (149 packages loaded, 2789 targets configured)

Analyzing: target //:license-check (149 packages loaded, 2789 targets configured)

Analyzing: target //:license-check (155 packages loaded, 4811 targets configured)

Analyzing: target //:license-check (156 packages loaded, 4935 targets configured)

Analyzing: target //:license-check (157 packages loaded, 5055 targets configured)

Analyzing: target //:license-check (157 packages loaded, 5055 targets configured)

Analyzing: target //:license-check (157 packages loaded, 5055 targets configured)

Analyzing: target //:license-check (157 packages loaded, 5055 targets configured)

Analyzing: target //:license-check (157 packages loaded, 5055 targets configured)

Analyzing: target //:license-check (157 packages loaded, 5055 targets configured)

Analyzing: target //:license-check (157 packages loaded, 5055 targets configured)

INFO: Analyzed target //:license-check (158 packages loaded, 6990 targets configured).
[7 / 13] [Prepa] Writing repo mapping manifest for //:license.check.license_check
[9 / 13] JavaToolchainCompileClasses external/rules_java+/toolchains/platformclasspath_classes; 1s disk-cache, processwrapper-sandbox ... (2 actions running)
[10 / 13] Generating Dash formatted dependency file ...; 2s disk-cache, processwrapper-sandbox ... (2 actions running)
INFO: From Generating Dash formatted dependency file ...:
INFO: Successfully converted 2 packages from Cargo.lock to bazel-out/k8-fastbuild/bin/formatted.txt
[12 / 13] Building license.check.license_check.jar (); 0s disk-cache, multiplex-worker
INFO: Found 1 target...
Target //:license.check.license_check up-to-date:
  bazel-bin/license.check.license_check
  bazel-bin/license.check.license_check.jar
INFO: Elapsed time: 209.189s, Critical Path: 3.92s
INFO: 13 processes: 9 internal, 3 processwrapper-sandbox, 1 worker.
INFO: Build completed successfully, 13 total actions
INFO: Running command line: bazel-bin/license.check.license_check ./formatted.txt <args omitted>
usage: org.eclipse.dash.licenses.cli.Main [-batch <int>] [-cd <url>]
       [-confidence <int>] [-ef <url>] [-excludeSources <sources>] [-help] [-lic
       <url>] [-project <shortname>] [-repo <url>] [-review] [-summary <file>]
       [-timeout <seconds>] [-token <token>]

[github-actions]

The created documentation from the pull request is available at: docu-html

[MaximilianSoerenPollak]

Currently discussing if it makes sense to add a python example in addition to the cpp & rust ones, to then re-enable ''use_repo(python)" without it being cleared up by bazel mod tidy.