purge cache from bot

- set all metadata entries to 1yr cache time, then purge cache when the bot updates them
- if top-level metadata is updated, /packages and /packages/<pkg>/versions will be purged. If either top-level (package.json) metadata or a new version is added, it's aggregated metadata will be purged /packages/<pkg>/all

we could also use tags to purge