feat: add workspaceRelationship

[DmitriyLewen]

Description

Add workspaceRelationship.

workspaceRelationship will be used for cargo, npm, maven, etc. packages.
See #7802 for more details.

This PR also adds workspaceRelationship for maven modules.

Related issues

• Close bug(java): dependOn contains extra dependencies for pom.xml files with modules when using SBOM formats #7802

Checklist

• I've read the guidelines for contributing to this repository.
• I've followed the conventions in the PR title.
• I've added tests that prove my fix is effective or that my feature works.
• I've updated the documentation with the relevant information (if needed).
• I've added usage information (if the PR introduces new options)
• I've included a "before" and "after" example to the description (if the PR is a user interface change).

[knqyf263]

Do you have any idea why UID is different now?

[DmitriyLewen]

I added workspaceRelationship as 2:

trivy/pkg/fanal/types/package.go

Lines 17 to 21 in 542a380

	RelationshipUnknown Relationship = iota
	RelationshipRoot
	RelationshipWorkspace // For maven `modules`. TODO use it for cargo and npm workspaces
	RelationshipDirect
	RelationshipIndirect

to correct sorting:

trivy/pkg/fanal/types/package.go

Lines 233 to 240 in 927c6e0

	switch {
	case pkgs[i].Relationship != pkgs[j].Relationship:
	if pkgs[i].Relationship == RelationshipUnknown {
	return false
	} else if pkgs[j].Relationship == RelationshipUnknown {
	return true
	}
	return pkgs[i].Relationship < pkgs[j].Relationship

So when we calc UID - we use 4 instead of 3 for IndirectRelationship (as example)