Store full aqua tarball urls in mise.lock

[jdx]

If we stored full aqua tarball URLs instead of just the filenames, we should be able to reduce our reliance on GITHUB_TOKEN at least when running mise install and not installing the latest version but a locked version of a tool