fix: scope credential helpers

.apko/.bazelrc

@@ -2,4 +2,5 @@
 # Required for making http range requests when fetching the apk packages.
 # https://developer.mozilla.org/en-US/docs/Web/HTTP/Range_requests
 
-common --credential_helper="%workspace%/.apko/range.sh"
+common --credential_helper="dl-cdn.alpinelinux.org=%workspace%/.apko/range.sh"
+common --credential_helper="packages.wolfi.dev=%workspace%/.apko/range.sh"

.bazelrc

@@ -4,6 +4,8 @@
 
 # Required until this is the default; expected in Bazel 7
 common --enable_bzlmod
+# Disable lockfile for now. It is unstable.
+common --lockfile_mode=off
 
 # Required for rules_apko to make range requests
 try-import %workspace%/.apko/.bazelrc

.gitattributes

@@ -1,4 +1,5 @@
 docs/*.md linguist-generated=true
 docs/initial-setup.md linguist-generated=false
 docs/apko-cache.md linguist-generated=false
-MODULE.bazel.lock linguist-generated=true
+MODULE.bazel.lock linguist-generated=true
+**/apko.lock.json linguist-generated=true