jpkg: complete binary package setup

ober

b0c4f83ec82f5ad6ac8fc3473d6d7e73bcc8ed0a

diff --git a/.gitignore b/.gitignore
index d703e75..8bcbb4e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -7,3 +7,4 @@
 *.db-wal
 *.so
 *.dylib
+.jpkg/
diff --git a/jpkg.lock b/jpkg.lock
new file mode 100644
index 0000000..1b4f6b5
--- /dev/null
+++ b/jpkg.lock
@@ -0,0 +1,2 @@
+;; jpkg.lock — generated by jpkg; records the exact resolved dependency graph. Do not edit by hand.
+(lock (version 1) (packages ()))
diff --git a/jpkg.policy.sexp b/jpkg.policy.sexp
new file mode 100644
index 0000000..3f95f7f
--- /dev/null
+++ b/jpkg.policy.sexp
@@ -0,0 +1,3 @@
+(policy
+  (mode dev)
+  (allow (native-build) (ffi)))
diff --git a/jpkg.sexp b/jpkg.sexp
index 343e724..da4896a 100644
--- a/jpkg.sexp
+++ b/jpkg.sexp
@@ -8,4 +8,6 @@
   (modules ((root "src")))
   (dependencies ())
   (dev-dependencies ())
-  (capabilities ()))
+  (capabilities ((native-code reason: "static native runtime and secure filesystem shim")
+                 (ffi libraries: ())
+                 (executables ("jerboa-imagesite")))))