Provide more comprehensive options for possible upgrades

The current VC UI shows one nearest non-vulnerable package and the latest non-vulnerable package for a given purl. Although, it is possible that neither of those version upgrades is suitable for me. Instead, I would like to upgrade to a vulnerable version with a low vulnerability severity because the development efforts in upgrading to the suggested versions are far too much than the risk (that I can accept) imposed by a low severity vulnerable upgrade.

Some sort of ordering like:
```
Worst upgrade candidate -> ... -> Ok-ish upgrade candidate -> Best upgrade candidate
```

The ordering could depend on:
1. Number of vulnerabilities for the upgrade candidate
2. Severity of those vulnerabilities