tomd: refactor move artifact resolvers into their own package
a composite artifact resolver seems a better abstraction
move back to a single artifact resolver, and make use of the composite one