Policy Condition for Direct Components

### Current Behavior

In the policy management we can add coordinates as condition. While coordinates can be specified with a group, name, and version, an _exact_ match is not provided.

Example: Component shown as belonging to group "org.keycloak" is actually part of "org.keycloak.bom" group and shows up as a result in the alert. This results in reporting on 70 components instead of 34 direct ones.


### Proposed Behavior

Add a new condition to the policy management for direct components only.

### Checklist

- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested