Implement more generic vendor packages recommendations

[dejanb]

At this point recommendation API only suggest packages from Red Hat as a vendor. We need explore versioning schemes from other vendors and try to find a best way to support it generically.

For starters here are some exmaple

• Red Hat

3.6.8-38.redhat_16.4.1
1.7.10-17.redhat_2.ep7.el7
2.7.5-48.redhat_00001

(common suffix: -redhat-<digits> or -<digits>.redhat<...>)

• Atlassian

8.5.14-atlassian-1
7.13.0-atlassian-4

(suffix: -atlassian-<digits>)

• Spring

5.3.20.release
4.3.30.RELEASE

(suffix: .release or .RELEASE)

• Debian / Ubuntu

1.2.3-1ubuntu1
2.0.0-3debian4

(suffix: -<digits>(ubuntu|debian)<digits>)

• SUSE

1.4.3-3.18.1.suse.1

(suffix: .suse.<digits>)

• Oracle

2.4.57-5.0.3.0.1.el8uek

(suffixes like .el8uek or .oracle)

• Amazon Linux

1.1.1k-7.amzn2.0.2

(suffix: .amzn<digits>)

• Alpine

1.1.1w-r0

(suffix: -r<digits>)

[ctron]

I think @lcarva is working on something similar in PR #2020

[Strum355]

A few questions that would be good to have answers for ahead of implementing this:

1. If we have matches for multiple vendors for a given purl input, do we return all of them? Im assuming yes
2. Do we want to include a hard-coded list of vendors as above and then provide a config format for users to provide an additional list of regexes?
   a. If we do include a predefined list, what ones?
3. How do we deal with vendor suffixes that dont parse cleanly with lenient_semver? I ran the set you included and of those the alpine & amazon ones dont parse the patch version correctly. Theres also the question of whether relying on the Ord implementation in semver crate for deciding which is the best/latest vendor release is "good enough" (thats what we're currently doing in the PR)?

8.5.14-atlassian-1 Version {
    major: 8,
    minor: 5,
    patch: 14,
    pre: Prerelease("atlassian-1"),
}
4.3.30.RELEASE Version {
    major: 4,
    minor: 3,
    patch: 30,
    build: BuildMetadata("RELEASE"),
}
2.0.0-3debian4 Version {
    major: 2,
    minor: 0,
    patch: 0,
    pre: Prerelease("3debian4"),
}
1.4.3-3.18.1.suse.1 Version {
    major: 1,
    minor: 4,
    patch: 3,
    pre: Prerelease("3.18.1.suse.1"),
}
2.4.57-5.0.3.0.1.el8uek Version {
    major: 2,
    minor: 4,
    patch: 57,
    pre: Prerelease("5.0.3.0.1.el8uek"),
}
1.1.1k-7.amzn2.0.2 Version {
    major: 1,
    minor: 1,
    patch: 0,
    pre: Prerelease("1k-7.amzn2.0.2"),
}
1.1.1w-r0 Version {
    major: 1,
    minor: 1,
    patch: 0,
    pre: Prerelease("1w-r0"),
}