cosmo: new package

[Thomas: indicate that the lpeg dependency is a run-time dependency,
as suggested by Arnout.]

Signed-off-by: Francois Perrad <francois.perrad@gadz.org>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>