ngx_brotli: new package

Source-only package shipping google/ngx_brotli master (pinned at
a71f9312) under /usr/src/ngx_brotli for consumption by nginx
builds via --add-dynamic-module.

The upstream tag v1.0.0rc (2021) predates the fix for nginx 1.25+
build support, so master HEAD is pinned instead. Submodules are
intentionally not initialized; consumers link against system
brotli-dev via pkg-config (matching Alpine/Debian behavior).

Author: akirk-gitguardian

ngx_brotli.yaml

@@ -0,0 +1,34 @@
+package:
+  name: ngx_brotli
+  version: "1.0.0_p20231009"
+  epoch: 0
+  description: Nginx module for Brotli compression (source tree for dynamic module builds)
+  copyright:
+    - license: BSD-2-Clause
+  dependencies:
+    runtime:
+      - wolfi-baselayout
+
+environment:
+  contents:
+    packages:
+      - busybox
+      - ca-certificates-bundle
+
+pipeline:
+  - uses: git-checkout
+    with:
+      repository: https://github.com/google/ngx_brotli.git
+      branch: master
+      expected-commit: a71f9312c2deb28875acc7bacfdd5695a111aa53
+      destination: ngx_brotli
+
+  - runs: |
+      mkdir -p ${{targets.destdir}}/usr/src/ngx_brotli
+      cp -r ngx_brotli/. ${{targets.destdir}}/usr/src/ngx_brotli/
+      # drop git metadata; consumers only need the source tree
+      rm -rf ${{targets.destdir}}/usr/src/ngx_brotli/.git
+
+test:
+  pipeline:
+    - uses: test/tw/srcpackage