Allow filtering via `component_id` in GraphQL and controller

Implementation plan

1. Add Group|Project.dependencies query
2. Expose component_ids in params for Groups::DependenciesController