feat: add `--allow-import` flag (#25469)

This replaces `--allow-net` for import permissions and makes the
security sandbox stricter by also checking permissions for statically
analyzable imports.

By default, this has a value of
`--allow-import=deno.land:443,jsr.io:443,esm.sh:443,raw.githubusercontent.com:443,gist.githubusercontent.com:443`,
but that can be overridden by providing a different set of hosts.

Additionally, when no value is provided, import permissions are inferred
from the CLI arguments so the following works because
`fresh.deno.dev:443` will be added to the list of allowed imports:

```ts
deno run -A -r https://fresh.deno.dev
```

---------

Co-authored-by: David Sherret <dsherret@gmail.com>

7 files changed, 0 insertions, 47 deletions

diff --git a/tests/specs/info_tests/info_recursive_modules/__test__.jsonc b/tests/specs/info_tests/info_recursive_modules/__test__.jsonc
deleted file mode 100644
index c4313a2fb..000000000
--- a/tests/specs/info_tests/info_recursive_modules/__test__.jsonc
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-  "args": "info --quiet info_recursive_imports_test.ts",
-  "output": "info_recursive_imports_test.out",
-  "exitCode": 0
-}
diff --git a/tests/specs/info_tests/info_recursive_modules/info_recursive_imports_test.out b/tests/specs/info_tests/info_recursive_modules/info_recursive_imports_test.out
deleted file mode 100644
index 3340f3859..000000000
--- a/tests/specs/info_tests/info_recursive_modules/info_recursive_imports_test.out
+++ /dev/null
@@ -1,13 +0,0 @@
-local: [WILDCARD]info_recursive_imports_test.ts
-type: TypeScript
-dependencies: 4 unique
-size: [WILDCARD]
-
-file://[WILDCARD]/info_recursive_imports_test.ts ([WILDCARD])
-└─┬ file://[WILDCARD]/recursive_imports/A.ts ([WILDCARD])
-  ├─┬ file://[WILDCARD]/recursive_imports/B.ts ([WILDCARD])
-  │ ├─┬ file://[WILDCARD]/recursive_imports/C.ts ([WILDCARD])
-  │ │ ├── file://[WILDCARD]/recursive_imports/A.ts *
-  │ │ └── file://[WILDCARD]/recursive_imports/common.ts ([WILDCARD])
-  │ └── file://[WILDCARD]/recursive_imports/common.ts *
-  └── file://[WILDCARD]/recursive_imports/common.ts *
diff --git a/tests/specs/info_tests/info_recursive_modules/info_recursive_imports_test.ts b/tests/specs/info_tests/info_recursive_modules/info_recursive_imports_test.ts
deleted file mode 100644
index c9ba44755..000000000
--- a/tests/specs/info_tests/info_recursive_modules/info_recursive_imports_test.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import { A } from "./recursive_imports/A.ts";
-
-export function test() {
-  A();
-}
diff --git a/tests/specs/info_tests/info_recursive_modules/recursive_imports/A.ts b/tests/specs/info_tests/info_recursive_modules/recursive_imports/A.ts
deleted file mode 100644
index 43ecdbe5e..000000000
--- a/tests/specs/info_tests/info_recursive_modules/recursive_imports/A.ts
+++ /dev/null
@@ -1,7 +0,0 @@
-import { B } from "./B.ts";
-import { thing } from "./common.ts";
-
-export function A() {
-  thing();
-  B();
-}
diff --git a/tests/specs/info_tests/info_recursive_modules/recursive_imports/B.ts b/tests/specs/info_tests/info_recursive_modules/recursive_imports/B.ts
deleted file mode 100644
index 9fff0fdc9..000000000
--- a/tests/specs/info_tests/info_recursive_modules/recursive_imports/B.ts
+++ /dev/null
@@ -1,7 +0,0 @@
-import { C } from "./C.ts";
-import { thing } from "./common.ts";
-
-export function B() {
-  thing();
-  C();
-}
diff --git a/tests/specs/info_tests/info_recursive_modules/recursive_imports/C.ts b/tests/specs/info_tests/info_recursive_modules/recursive_imports/C.ts
deleted file mode 100644
index e47e77b41..000000000
--- a/tests/specs/info_tests/info_recursive_modules/recursive_imports/C.ts
+++ /dev/null
@@ -1,8 +0,0 @@
-import { A } from "./A.ts";
-import { thing } from "./common.ts";
-
-export function C() {
-  if (A != null) {
-    thing();
-  }
-}
diff --git a/tests/specs/info_tests/info_recursive_modules/recursive_imports/common.ts b/tests/specs/info_tests/info_recursive_modules/recursive_imports/common.ts
deleted file mode 100644
index 2b16a7bf1..000000000
--- a/tests/specs/info_tests/info_recursive_modules/recursive_imports/common.ts
+++ /dev/null
@@ -1,2 +0,0 @@
-export function thing() {
-}