Parse source_package_name from SBOM component properties
What does this MR do and why?
This is a prerequisite for ingestion of source_package_name from trivy report
While the details of ingestion itself are still not clear, the parsing part is straight-forward and we can merge this code to the codebase.
Results of this MR are not visible for the users.
MR acceptance checklist
Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
How to set up and validate locally
Numbered steps to set up and validate the change are strongly suggested.
Related to #427095 (closed)