[feature] Have IsDependency be able to point a version as well on top of existing function

[lumjjb]

Is your feature request related to a problem? Please describe.

The current IsDependency definition where it points to the PackageName with associated versionRange introduces some issues and makes implementing clients a bit more tricky:

See

• The snowflake package identifier problem #594
• Workaround depversion handling. #1113

Describe the solution you'd like

Allow IsDependency to also be able to point a version range when required
Requires

• Updating graphql to allow IsDependency's depPkg field to be able to point to pkgVersion, modifying spec and input (to include PkgMatch as well). Implement new IsDependency graphql to point to versions #1125
• Updating SBOM parsers (and other appropriate parsers to use specific version depPkg where possible)

Describe alternatives you've considered

Still being discussed to have a better long term solution: #217

Additional context
Add any other context or screenshots about the feature request here.

[lumjjb]

FYI @knrc

[lumjjb]

This is implemented in #1125