From format coverage and security scanning to storage cost and operational burden — a decision guide to private artifact repositories for engineering teams.