Add support for showing OSSF Scorecard scores

### Current Behavior

Focus currently is on already known vulnerabilities.

### Proposed Behavior

There are projects like https://github.com/ossf/scorecard which calculate a security health score for repositories. Having this score as additional data available would allow several benefits:

- Get aware of low trust components in the project when showing the score in the components table
- Define policies that trigger when using low trust components (below a defineable score), allowing for actions like either exchange the dependency or define further action to be taken (as required by some industry standards)

OSSF Scorecard provides a REST API for the most relevant github projects, but also a public dataset that can be queried (maybe imported?).
It should be a feature that can be enabled optionally, to reduce load if one does not need it.

There is another request to integrate deps.dev (https://github.com/DependencyTrack/dependency-track/issues/1499) which also would include OSSF Scorecard values, but this is halted due to missing PURL support in deps.dev. So maybe integrating it separately would make sense for now.

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested