Prioritise Renovate's `package_type`

Blocked by #436 (closed).

This will allow us to more easily query things, and allow us to prioritise package_types (at least internally) which should be consistent, rather than the package_manager for Renovate, and package_type for SBOMs.

This will require a refactor of cases where we're doing i.e. s.package_type as package_manager

This will mean we can get to not needing duplicate custom advisories, too.

This will also need to apply to sensitive_packages

We also need to mark PackageManager as Deprecated:

Also update GraphQL

Also update various UI flows/CLI args