[BUG]: For a while after a release, a bare major such as java@21-tem can install a build that vfox search does not list yet #113

Version
vfox-java main (b635aaa), vfox 1.0.13

OS
Linux

Describe the bug
vfox search java <distribution> asks Foojay for every package of the distribution, but a bare major asks another question: java@21-tem asks for version=21&latest=available, and java@23-mandrel for distribution_version=23:

Foojay's answers come through Cloudflare, which caches each URL on its own, so the two questions get answers of different ages:

$ curl -sS -D - -o /dev/null 'https://api.foojay.io/disco/v3.0/packages/jdks?version=&distribution=mandrel&architecture=amd64&archive_type=tar.gz&operating_system=linux&lib_c_type=glibc&directly_downloadable=true' | grep -i -E '^(age|last-modified|cf-cache-status):'
age: 1321
last-modified: Tue, 20 Oct 2026 17:31:11 GMT
cf-cache-status: HIT
$ curl -sS -D - -o /dev/null 'https://api.foojay.io/disco/v3.0/packages/jdks?version=&distribution=mandrel&architecture=amd64&archive_type=tar.gz&operating_system=linux&lib_c_type=glibc&directly_downloadable=true&distribution_version=23' | grep -i -E '^(age|last-modified|cf-cache-status):'
age: 93
last-modified: Tue, 20 Oct 2026 17:51:40 GMT
cf-cache-status: HIT
$ curl -sS -D - -o /dev/null 'https://api.foojay.io/disco/v3.0/packages/jdks?version=&distribution=temurin&architecture=amd64&archive_type=tar.gz&operating_system=linux&lib_c_type=glibc&directly_downloadable=true' | grep -i -E '^(age|last-modified|cf-cache-status):'
age: 1341
last-modified: Tue, 20 Oct 2026 17:30:53 GMT
cf-cache-status: HIT
$ curl -sS -D - -o /dev/null 'https://api.foojay.io/disco/v3.0/packages/jdks?version=21&distribution=temurin&architecture=amd64&archive_type=tar.gz&operating_system=linux&lib_c_type=glibc&directly_downloadable=true&latest=available' | grep -i -E '^(age|last-modified|cf-cache-status):'
age: 632
last-modified: Tue, 20 Oct 2026 17:42:42 GMT
cf-cache-status: HIT

So for a while after Foojay adds a release, vfox install can take it while vfox search does not list it yet. That failed E2E on #111 on 2026-10-20, on the GraalVM Community rows of ubuntu-latest, at 16:22 UTC, minutes after Oracle GraalVM 25.0.5 reached Foojay, and again in the next run half an hour later. checkGraalVMBareMajor fakes the builds of 25 that vfox search java graal lists as installed, so that vfox install java@25-graal finds one of them, but the install took 25.0.5, which the search did not list, and downloaded it (https://github.com/version-fox/vfox-java/actions/runs/39456445454/job/118744465851, https://github.com/version-fox/vfox-java/actions/runs/39460751060/job/118759263303):

Error:      	"Preinstalling java@25.0.5-graal...\nVerifying checksum ...\nWARNING: Checksum is not provided, skip verify...\nUnpacking /root/.vfox/cache/java/graalvm-jdk-25.0.5_linux-x64_bin.tar.gz...\nInstall java@25.0.5 [...]
Test:       	TestE2E/main-graalce
Messages:   	vfox install java@25-graal must take 25.0.4.1.1-graal, the newest build that is no feature release

#111 then made Oracle GraalVM and GraalVM Community ask what the search asks. Two checks on the Temurin rows, which run on every runner, compare the search with a bare major the same way and can fail the same way: checkOwnNumbers with java@23-mandrel and java@23-nik, as Mandrel and Liberica NIK put out a 23.1 release every quarter, and checkNameOnly with the newest major of Eliya, OpenLogic and Semeru certified, which still release:

My guess is that a bare major should ask for every package, as the search does, and take the newest release of the major itself, as #111 does for GraalVM. I compared that with latest=available for every bare major of the other 27 distributions on Foojay, on Linux x64 and arm64, Linux x64 with musl, macOS x64 and arm64 and Windows x64 and arm64, and got the same release everywhere. Only Dragonwell 11 on Windows x64 and Linux x64 with musl changes file, from the Standard to the Extended build of 11.0.32, which java@11.0.32-albba already installs.

Found while working on #105.