Use only runtime dependencies (with exceptions)

This switches the tool to only output runtime dependencies, but allow for special cases to include build dependencies if needed.

By default, only the compose and filter element will include their build dependencies as well.

One can override this by setting the "depends-on" public data in the "sbom" domain. It will be used in priority to the above heuristics.