list-versions: use the configured source: resolver and its min_release_age #1411

Part of #1294 (Phase 8 of epic #1254). Branch: new-resolver-config.

Problem

package list-versions ignores source: settings:

1. Wrong provider. It calls the get_resolver_provider hook directly (commands/package.py, list_versions()). It never uses sources.get_source_provider(), so it doesn't use the profile's index, tags or distribution types. For example, a gitlab-tag-download package lists PyPI versions instead of GitLab tags.
2. Wrong cooldown status. _resolve_list_versions_cooldown() calls resolve_package_cooldown(), which reads only resolver_dist.min_release_age. A source: package's min_release_age is ignored, so versions can be marked blocked or ok wrongly.

#1407 fixes package resolve only, not list-versions.

Tests

• A source: package lists versions from its configured provider.
• The cooldown status uses the profile's min_release_age, including 0 and --ignore-per-package-overrides.
• Old-style packages behave as before.