swh-cc: Ensure that we can collect package data

Package data "assembly" will require special care (though now we may be able to use swh-fuse, this may be a lesser issue) as this is a time- and data-intensive operation.

We therefore may need to create code to collect a complete package version from Software Heritage to feed ScanCode as a whole package scan and return a minimal compact data structure