[BUG] fingerprint missmatch when running orchestrion go run <package>@latest with <package> not in go.mod

[eliottness]

Describe what happened:

Running or building package with their full name and the @<version> suffix make it possible to bypass go.mod dependency resolution and acts as a quickfire way to download, build, and run in one go a Go binary. Except orchestrion fails when the said-package (here github.com/gohugoio/hugo) has no versions in the go.mod.

Here is the output:

/opt/homebrew/Cellar/go/1.23.3/libexec/pkg/tool/darwin_arm64/link: fingerprint mismatch: [google.golang.org/protobuf/proto](http://google.golang.org/protobuf/proto) has 053342eece2d492d, import from [github.com/bep/godartsass/v2](http://github.com/bep/godartsass/v2) expecting b47b4ca4b4e159fc

Describe what you expected:

I would expect the package to build fine and run.

Steps to reproduce the issue:

$ mkdir /tmp/test && cd /tmp/test
$ go mod init test
$ orchestrion go run github.com/gohugoio/hugo@latest
/opt/homebrew/Cellar/go/1.23.3/libexec/pkg/tool/darwin_arm64/link: fingerprint mismatch: [google.golang.org/protobuf/proto](http://google.golang.org/protobuf/proto) has 053342eece2d492d, import from [github.com/bep/godartsass/v2](http://github.com/bep/godartsass/v2) expecting b47b4ca4b4e159fc

Additional environment details (Version of Go, Operating System, etc.):
Version of orchestrion: v1.0.0
Tested on linux and MacOS

[eliottness]

The workaround for now is to add the package to run to the go.mod file. Following the example given above this would require to run go get github.com/gohugoio/hugo@latest before doing orchestrion go run ...

[eliottness]

Just as mentioned in #434, we are not able to resolve dependencies outside of the go.mod for now. The workaround cited above ⏫ will be the standard for now.