Resolve the main target repository through the SBOM itself

[tromai]

Description
Scenario:

• The main target software component (via -rp or --purl) is available but its repository is not available
• An SBOM is available (via -sbom)

Macaron should try to extract the information for the main software component from the SBOM itself.

Blocking issues
#157