feat: add more lockfile extractors

[cuixq]

This PR adds more lockfile extractors supported in OSV-Scalibr.

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 69.01%. Comparing base (14686b9) to head (1c4ddf8).
Report is 2 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1518      +/-   ##
==========================================
+ Coverage   68.98%   69.01%   +0.02%     
==========================================
  Files         197      197              
  Lines       18800    18791       -9     
==========================================
- Hits        12970    12969       -1     
+ Misses       5127     5119       -8     
  Partials      703      703              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[G-Rath]

fwiw if you wait a little longer we'll hopefully be able to also add bun.lock

[oliverchang]

Do we want to add any tests here? @another-rex

Or can we assume that the extractors are already well tested in OSV-Scalibr and the integration here doesn't introduce any new points of failure?

[another-rex]

We should copy some tests fixtures from scalibr into our main_test fixtures. We might not even need to add any new tests there, just update the snapshots after moving some new fixtures in.

[cuixq]

@G-Rath yes I do plan to wait for bun.lock - sending out for some high-level review first.