Update sbom_occurrences ingestion in order to fill vulnerabilities

Why are we doing this work

As discussed here, the following is an overview of the plan for adding vulnerabilities into both project and group levels:

note A new FF is recommended for the set of changes proposed above.

Link to the PoC MR to keep this comment self-contained.

Relevant links

Non-functional requirements

  • Documentation:
  • Feature flag:
  • Performance:
  • Testing:

Implementation plan

Verification steps

Edited by Zamir Martins