Proper way to skip all auto-updating

[maschwenk]

Description

It seems like rover has --skip-update-check
All the plugins have --skip-update

So if I want to enforce that neither of these update themselves I have to run like so?

rover --skip-update-check supergraph compose --skip-update

It'd be kinda nice if the auto-updating behavior was opt in. I work on a 100+ engineer monorepo and we want to tightly control these upgrades and ideally make sure they are lockstep with CI and prod.

[smyrick]

If you want to lock composition to a specific version, you can pass a config file: https://www.apollographql.com/docs/rover/commands/supergraphs#yaml-configuration-file