[FEATURE] VSR: Prevent Proxying Unscanned/Malicious Packages

[darcyclarke]

• reference the client's socket integration for our insights selectors & request the status of packages being proxied (caching results for some appropriate time) & gate whether to return or not
• this should work at both the manifest & packument level (ie. we shouldn't show packages that haven't been scanned/know the status of in packuments)
• we can make this configurable but likely it should be default on & only opt-out