Allow to share component audit among several projects

## Current Behavior:

Currently I can suppress a CVE globally or on project basis.

### Proposed Behavior:

I want to be able to suppress a CVE globally, for a project category or on project basis.

I have to manage the same component in different kind of projects where the context is very different and for which the audit result will not be the same. But several projects of the same category would share the audit result.

Another use case is when you use a build system (Yocto or Buildroot), the OSS component version and the security patches are defined in the build system but the project can fix additional fix in their release. Hence I would like to be able track that a component is patched in the build system and hence that all derived project benefit of it.