feat: add more fileds to scaresult metadata

[mcombuechen]

What this does

This adds fields for information that the uv plugin is currently emitting, to the ecosystems.SCAResult meta.

See here for the values that the uv plugin is currently emitting:

cli-extension-dep-graph/pkg/scaplugin/interface.go

Line 25 in 0973491

type Finding struct {

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[mcombuechen]

I'm not sure this is exactly the same as TargetFile. So maybe we don't need this to be separate.

[mcombuechen]

To make a distinction between the manifest and the lockfile. Relevant for other locked package managers in other ecosystems, too.

[mcombuechen]

I'm not sure we want/need this; ideally some orchestrator outside of this plugin knows how to not throw two different plugins at the same pyproject.toml. Ideally the uv plugin would be agnostic to how it is being invoked alongside other plugins.

Maybe if we rename this to ProcessedFiles or ProcessedTargetFiles it would make more sense and it would be something that an orchestrator could pick up? Would this be a duplicate of TargetFile then?