APPENG-4467- rpm analyzier mile stone one

[RedTanny]

No description provided.

[batzionb]

Can the API payload be simplified somehow?
Will this more simplified structure work:

{
  "scan": {
    "vulns": [
      { "vuln_id": "CVE-2023-0464" }
    ]
  },
  "rpm": {
      "name": "openssl",
      "version": "1.1.1k",
      "release": "8.el9_9",
      "arch": "x86_64"
    }
}

without the additional ecosystem option
more intuitive name than "target_package"
without all other fields being required and without pipeline_mode
if rpm is present, use the rpm pipleline mode
and not under the image field, which is confusing as it's not an image

[batzionb]

In addition - can the API changes appear in the openapi spec

[batzionb]

Follow up on #222 (comment)
Using the API as is, requires the client to define a dummy repo URL so request won't be rejected
See here