Suppressed vulnerabilities of RelatedDependencies missing in report

**Describe the bug**
When dependencies are bundled up as they concern the same set of libraries (e.g. Spring) and vulnerabilities are suppressed for any of the 'related vulnerabilities' these suppressions do not show up at the Suppressed Vulnerabilities section of the report.

**Version of dependency-check used**
The problem occurs using version 7.3.0 of the maven plugin, but due to their nature are expected to be reproducable on any of the integrations.

**To Reproduce**
pom.xml:
```xml

4.0.0
net.aikebah
suppressions-test
1.0-SNAPSHOT


org.springframework
spring-web
5.3.23





org.owasp
dependency-check-maven
7.3.0

${project.basedir}/filter.xml

```

filter.xml:
```xml

^pkg:maven/org\.springframework/spring\-web@.*$
CVE-2016-1000027

```

Run `mvn dependency-check:check`

**Observed behavior**
Spring-web is reported as a related dependency of Spring-core and the suppression is not accounted for in the suppressed vulnerabilities count and the suppressed vulnerabilities section.

**Expected behavior**
Spring-web is reported as a related dependency of Spring-core and the suppression is accounted for in the suppressed vulnerabilities count and the suppressed vulnerabilities section.

**Additional context**
Already checked with mvndebug that the suppressions are available, the reporting needs to be adapted to take suppressed vulnerabilities of related dependencies into account.