Maintain order when executing PackageLicenses#fetch

What does this MR do and why?

The previous implementation of PackageLicenses#fetch returned packages in a different order from the passed in components: packages with licenses were first, followed by packages without licenses. This means callers can't make assumptions about the order of returned elements, which complicates integrations, such as the one described here. By maintaining the same order between the passed in components and returned packages, we can allow callers to simplify and optimize their code.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

• I have evaluated the MR acceptance checklist for this MR.

Related to #409367