Semver aware WASI module resolution when dealing with imports

从 ComponentizeJS 的 WASI import 解析路径开始，跟踪对 wasi:http/types@0.2.6 等 import 的现有直接匹配处理。定义精确匹配、在受支持的 WASI 2.x 系列内升级，以及拒绝不兼容的旧版本时应遵循的兼容 semver 行为。完成的标准是，所述 import 能够解析到更新的兼容 world，同时 jco transpile 不在范围内。

Right now when building components with ComponentizeJS, we deal with references WASI types via direct match only.

This is usually fine but forces certain versions (the ones supported by StarlingMonkey below) to be used. Ideally we should be able to do an exact match where possible and the fall back to a compatible semver track (usually allowing upgrades but not downgrades) similar to what wasmtime would do.

As WASI 2.x is unlikely to change going forward I think we can now do this pretty definitively here, with minimal changes required for StarlingMonkey as well.

Also note that while this issue is probably going to be unnecessary when the "new" ComponentizeJS lands, this issue is here for tracking purposes just to make sure this

A simple use case is being able to write wasi:http components against any version of 2.x and having that compile (and eventually jco transpile, but that's out of scope here!) properly. Essentially the following should never fail:

import { Fields } from "wasi:http/types@0.2.6";

(Even if the underlying world is 2.10/2.12, but this should fail if the underlying world is 2.4 probably)

Maybe it should be possible to disable this feature (i.e. supporting very specific imports), but IMO this would be a big DX improvement that is worth doing (maybe we emit some warnings or something if we're worried about it).