Follow-up from "feat: Transition sbom_component_versions to gitlab_sec schema"

The following discussion from !160583 (merged) should be addressed:

• @radbatnag started a discussion: (+2 comments)

  Do we need to add matching expectations in ee/spec/models/sbom/component_spec.rb? Also for the other models with the added has_many :occurences lines