Fetch component by release sha

What does this MR do and why?

This MR resolves https://gitlab.com/gitlab-org/gitlab/-/issues/440675
When release exists and the version is matching the tag on the release the sha is being set to release.sha. If there are no releases and version is passing a string like 'master', then the sha of the latest master commit is being set.

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

How to set up and validate locally

Numbered steps to set up and validate the change are strongly suggested.