Use `mvn dependency:tree` to resolve dependency information for Maven source

This issue has no description.

The issue names no files, tests, or entry points, so first locate the Maven source handling and its current dependency-resolution path in the Syft repository. Compare that behavior with the dependency information produced by `mvn dependency:tree`; done means Maven source dependencies are resolved through that command and the relevant behavior is covered by tests.

Written by the indexing model from the issue text.