feat: add a native machine ID library COMPASS-8443

[gagik]

Adds a native device ID library for MacOS, Linux, and Windows. 100x+ faster implementation without depending on child process spawning.

Meant as a replacement for node-machine-id and since this is a popular library and usecase, I also put some effort to make this package more tidy and useful for the larger community.

[gagik]

This is more for fun, I was curious what the difference would be

[kmruiz]

Likely we want to return an empty string here to mark an error. While it's true that the empty constructor of std::string must initialise an empty string, it's best if we early return to avoid further mistakes as buffer contains undefined contents and might be tempting to use them.

Suggested change

	if (CFStringGetCString((CFStringRef)uuidProperty, buffer, sizeof(buffer), kCFStringEncodingUTF8))
	if (!CFStringGetCString((CFStringRef)uuidProperty, buffer, sizeof(buffer), kCFStringEncodingUTF8)) {
	// clean up too
	return "";
	}

[kmruiz]

Likely we want to check the failbit in file here too. There might be sometimes that there is an overflow on the output string due to surpassing the amount of max bytes that fit in the string (unlikely) or there is not enough memory (more likely).

[kmruiz]

This enforces to use always the 64 bit registry in Windows. Is that what we want to do? Windows dropped 32 bit support 5 years ago, so this is likely doing nothing and I would just use KEY_QUERY_VALUE.

[gagik]

ah one thing I forgot mention is that one goal of it this is to match Atlas CLI's (Go-based) device ID library so this copies the implementation from https://github.com/denisbrodbeck/machineid/blob/master/id_windows.go which does do this, assuming | isn't different in C++

[kmruiz]

Yeah the operator does the same, the only thing is that this logic can break old 32 bit machines and don't do anything on 64 bit machines.

However if we want to do the same thing just in case I'm fine keeping this logic as it is.

[gagik]

yeah consistency seems preferable but we can revisit if this ends up problematic. basically having no machine ID from both the Go and Node libraries on the same machine seems preferable to only one of them producing output as it skews our analytics to imply i.e. lower % use Atlas CLI

[kmruiz]

This is dangerous. Windows does not ensure that the value is a null-terminated string, so this can overflow. We need to use the output valueSize: https://learn.microsoft.com/en-us/windows/win32/api/winreg/nf-winreg-regqueryvalueexa

[kmruiz]

Leaving it approved so you can merge when the comments have been resolved.

Great job!