[GITEA] Vendor rupture dependency

- The [rupture](https://github.com/ethantkoenig/rupture) dependency was
essentially outdated in the sense it was using old version of
dependencies.
- The usage by Forgejo was rather a small portion, so that portion is
now vendored (with its tests).
- Removes old dependencies from go.sum (less dependencies is better for
reviewing what the heck we're importing). Just to note that they were
likely not being used by Go's build process (according to
https://go.dev/ref/mod#minimal-version-selection), so it's really a
matter of formal cleaning up dependencies we don't use and therefor
don't want to download and be in our go.sum.

(cherry picked from commit aa72a5f009)

Conflicts:
	go.sum
	https://codeberg.org/forgejo/forgejo/pulls/2148

modules/indexer/internal/bleve/metadata_test.go

@@ -0,0 +1,27 @@
+// Copyright 2024 The Forgejo Authors. All rights reserved.
+// SPDX-License-Identifier: MIT
+
+// Copied and modified from https://github.com/ethantkoenig/rupture (MIT License)
+
+package bleve
+
+import (
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+)
+
+func TestMetadata(t *testing.T) {
+	dir := t.TempDir()
+
+	meta, err := readIndexMetadata(dir)
+	assert.NoError(t, err)
+	assert.Equal(t, &IndexMetadata{}, meta)
+
+	meta.Version = 24
+	assert.NoError(t, writeIndexMetadata(dir, meta))
+
+	meta, err = readIndexMetadata(dir)
+	assert.NoError(t, err)
+	assert.EqualValues(t, 24, meta.Version)
+}