Upgrade Sourcemeta dependencies

[jviotti]

Signed-off-by: Juan Cruz Viotti jv@jviotti.com

[cubic-dev-ai]

No issues found across 60 files

_{Re-trigger cubic}

[augmentcode]

🤖 Augment PR Summary

Summary: This PR upgrades the vendored Sourcemeta Core and Blaze dependencies.

Changes:

• Moves JSON Schema bundling from Blaze into Core as schema_bundle with configurable options.
• Replaces Blaze's bundle component with a standalone dependencies-reporting library.
• Updates Blaze compiler, codegen, configuration, and alterschema callers to the Core bundler.
• Extends JSON Schema conversion with dialect validation, dependency keyword migration, and modern URI normalization.
• Adds Draft 3 canonicalization logic that removes identifiers after rewriting references.
• Improves 2019-09-to-2020-12 recursive-anchor and vocabulary conversion behavior.
• Enhances Core OpenAPI framing with location limits and discriminator mapping analysis.
• Updates CMake component exports and dependency pins for the new library layout.

_{🤖 Was this summary useful? React with 👍 or 👎}

[augmentcode]

Review completed. 1 suggestion posted.

Comment augment review to trigger a new review at any time.

[augmentcode]

[vendor/core/src/core/jsonschema/bundle.cc:90] The callback's WeakPointer is documented as a pointer into the bundled root, but its final token references the local key string instead; retaining the callback argument (or a copy of it) leaves a dangling reference when embed_schema returns. This makes the new callback API unsafe for clients that collect embedding locations.

Severity: medium

_{🤖 Was this useful? React with 👍 or 👎, or 🚀 if it prevented an incident/outage.}