Krikri::ShardYmlPin

Pin info per dependency under a top-level section header (e.g. "dependencies:") of a shard.yml: {name => {github, tag, branch}} with nil for whatever the entry doesn't pin. Line-based like the parsers above so it stays a pure, fixture-testable function.