harkaq: declarar deps medidas por el kernel (cosecha automática)

Cosecha desatendida de la campaña harkaq. Cada dep de acá la denunció el audit de
Landlock en un build real: el kernel vio al build usarla sin declararla, y el
store del hub confirma qué artefacto la provee (deuda DECLARABLE, §4.5).

Recetas:sassc scdoc sed shadow socat sqlite tar tmux tree tzdata util-linux vim wget when which wpa_supplicant xorriso xz zlib

No se tocó ninguna receta con deuda IRREDUCIBLE: declarar algo que el store no
provee rompería el build en vez de arreglarlo. Esas van a tandas/needs-review-harkaq.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

recipes/sassc.toml

@@ -24,4 +24,4 @@ zig c++ -static sassc.o -o sassc -L/usr/lib -lsass
 install   = "mkdir -p /out/usr/bin && cp sassc /out/usr/bin/sassc"
 
 [deps]
-build = ["libsass"]
+build = ["libsass", "make"]

recipes/scdoc.toml

@@ -16,6 +16,9 @@ target   = "x86_64-linux-musl"
 link     = "static"
 flags    = []
 
+[deps]
+build = ["make"]
+
 [build.phases]
 # de build() de Alpine (traducido; el lab provee $CBUILD/$CHOST — Etapa G Fase 3; revisá --shared para estático):
 compile = '''

recipes/sed.toml

@@ -47,4 +47,4 @@ _abuild_phase
 
 # perl era build-dep de Alpine sólo para tests/docs; el tarball trae configure + sed.1 pregenerado.
 [deps]
-build = ["linux-headers"]
+build = ["linux-headers", "busybox", "make"]

recipes/shadow.toml

@@ -74,4 +74,4 @@ install -m644 /dev/null etc/subgid
 # deps de Alpine remapeadas al catálogo canónico. AUSENTES quitadas:
 # linux-pam, libbsd, setcap. Sin fcaps (setcap falla en el sandbox) ⇒ sin libcap.
 [deps]
-build = ["linux-headers"]
+build = ["linux-headers", "busybox", "make"]

recipes/socat.toml

@@ -14,4 +14,4 @@ configure = './configure --build=$CBUILD --host=$CHOST --prefix=/usr CPPFLAGS=-I
 compile   = 'make'
 install   = 'make DESTDIR=/out install'
 [deps]
-build = ["openssl", "readline", "ncurses"]
+build = ["openssl", "readline", "ncurses", "perl"]

recipes/sqlite.toml

@@ -8,6 +8,9 @@ sha256  = "67d3fe6d268e6eaddcae3727fce58fcc8e9c53869bdd07a0c61e38ddf2965071"
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
+[deps]
+build = ["busybox", "make"]
+
 [build.phases]
 configure = "./configure --prefix=/usr --disable-shared --enable-static"
 compile   = "make"

recipes/tar.toml

@@ -17,6 +17,9 @@ target   = "x86_64-linux-musl"
 link     = "static"
 flags    = []
 
+[deps]
+build = ["busybox", "make"]
+
 [build.phases]
 # de build() de Alpine (traducido; el lab provee $CBUILD/$CHOST — Etapa G Fase 3; revisá --shared para estático):
 compile = '''

recipes/tmux.toml

@@ -15,4 +15,4 @@ configure = './configure --build=$CBUILD --host=$CHOST --prefix=/usr --sysconfdi
 compile   = 'make'
 install   = 'make DESTDIR=/out install'
 [deps]
-build = ["libevent", "ncurses", "bison"]
+build = ["libevent", "ncurses", "bison", "make"]

recipes/tree.toml

@@ -16,6 +16,9 @@ target   = "x86_64-linux-musl"
 link     = "static"
 flags    = []
 
+[deps]
+build = ["make"]
+
 [build.phases]
 # de build() de Alpine (traducido; el lab provee $CBUILD/$CHOST — Etapa G Fase 3; revisá --shared para estático):
 compile = "make LDFLAGS=\"$LDFLAGS\" CFLAGS=\"$CFLAGS\""

recipes/tzdata.toml

@@ -22,6 +22,9 @@ target   = "x86_64-linux-musl"
 link     = "static"
 flags    = []
 
+[deps]
+build = ["make"]
+
 [build.phases]
 # El Makefile de tz compila `zic` (C estándar, sin deps externas). VERSION lo pasamos a
 # mano porque el árbol se materializa vía `git archive` (sin .git para `git describe`).

recipes/util-linux.toml

@@ -73,4 +73,4 @@ make DESTDIR="/out" install
 # deps de Alpine/nix remapeadas al catálogo canónico. AUSENTES quitadas:
 # autoconf/automake/po4a/libxcrypt/sqlite/linux-pam/libcap-ng/systemd-minimal-libs.
 [deps]
-build = ["linux-headers"]
+build = ["linux-headers", "busybox", "make"]

recipes/vim.toml

@@ -68,4 +68,4 @@ rm -rf "/out"/usr/share/applications/ || true
 '''
 
 [deps]
-build = ["ncurses", "linux-headers", "pkgconf"]
+build = ["ncurses", "linux-headers", "pkgconf", "make"]

recipes/wget.toml

@@ -19,4 +19,4 @@ configure = '''
 compile = 'make'
 install = 'make DESTDIR=/out install'
 [deps]
-build = ["openssl", "zlib", "pcre2"]
+build = ["openssl", "zlib", "pcre2", "perl"]

recipes/when.toml

@@ -16,6 +16,9 @@ target   = "x86_64-linux-musl"
 link     = "static"
 flags    = []
 
+[deps]
+build = ["make"]
+
 [build.phases]
 # de package() de Alpine (traducido $pkgdir→/out):
 install = '''

recipes/which.toml

@@ -17,6 +17,9 @@ target   = "x86_64-linux-musl"
 link     = "static"
 flags    = []
 
+[deps]
+build = ["busybox", "make"]
+
 [build.phases]
 # de build() de Alpine (traducido; el lab provee $CBUILD/$CHOST — Etapa G Fase 3; revisá --shared para estático):
 compile = '''

recipes/wpa_supplicant.toml

@@ -23,7 +23,7 @@ target   = "x86_64-linux-musl"
 link     = "static"
 
 [deps]
-build = ["libnl"]
+build = ["libnl", "busybox", "make"]
 
 [build.phases]
 configure = '''

recipes/xorriso.toml

@@ -42,6 +42,9 @@ target      = "x86_64-linux-musl"
 link        = "static"
 zig_version = "0.13.0"
 
+[deps]
+build = ["busybox", "make"]
+
 [build.phases]
 configure = "./configure --prefix=/usr --disable-libreadline --disable-libedit --disable-libacl --disable-xattr --disable-zlib --disable-libbz2 --disable-libcdio CC='zig cc -mcpu=baseline -target x86_64-linux-musl' LDFLAGS=-static"
 compile   = "make -j\"$(nproc)\""

recipes/xz.toml

@@ -10,6 +10,9 @@ compiler = "gcc"
 target   = "x86_64-linux-musl"
 link     = "static"
 flags    = []
+[deps]
+build = ["make"]
+
 [build.phases]
 configure = '''
 ./configure --build=$CBUILD --host=$CHOST --prefix=/usr \

recipes/zlib.toml

@@ -24,6 +24,9 @@ compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
 
+[deps]
+build = ["make"]
+
 [build.phases]
 # --static: sólo libz.a (sin .so; mrustc/rustc enlazan estático). --prefix=/usr: zlib.h→/usr/include,
 # libz.a→/usr/lib, zlib.pc→/usr/lib/pkgconfig (layout que materialize_build_deps overlaya en /usr).