Make all package managers use the new dependency graph format

[sschuberth]

Currently, only the Gradle analyzer uses the new dependency graph format introduced in #3502. We should take advantage of the new format for more (ultimately all) package manager implementations.

Package managers that still need to be migrated are unchecked in this list:

• Bazel
• Bower
• Bundler
• Cargo
• Carthage
• CocoaPods
• Composer
• Conan
• GoMod
• Gradle
• GradleInspector
• Maven
• Npm
• NuGet
• Pnpm
• Pip
• Pipenv
• Poetry
• Pub
• Sbt (not relevant itself, as it uses Maven)
• SpdxDocumentFile
• Stack
• SwiftPm
• Yarn
• Yarn2

[sschuberth]

Here's a brief migration guide that I came up with while working on #9073:

1. Refactor existing code so that all metadata for a dependency is available in a single data class, let's name it D.
2. Implement a DependencyHandler<D> that returns various ORT model classes for that data class D.
3. In the specific package manager class, create a val graphBuilder = DependencyGraphBuilder(...) member variable that takes an instance of that DependencyHandler.
4. In resolveDependencies(), call graphBuilder.addDependencies(..) for the dependencies.
5. Change creating a Project from setting scopeDependencies to setting scopeNames = graphBuilder.scopesFor(projectId).
6. Change the returned ProjectAnalyzerResult to take an emptySet() as packages.
7. Override createPackageManagerResult() with PackageManagerResult(projectResults, graphBuilder.build(), graphBuilder.packages()).
8. In existing tests that call resolveSingleProject(), ensure to pass resolveScopes = true.