Design minimal package and deps output

I would like to have a minimalist data structure to support:
- #3464
Ideally:
- this should map naturally to a list of purls and scancode's current data structure for package dependencies, including "vers" ranges
- this should be easy to transform (to and from) GH-specific format for https://docs.github.com/en/rest/dependency-graph/dependency-submission