chore: revert the revert of "refactor: use pomxmlnet extractor from scalibr"

[cuixq]

This reverts #1613 that reverts #1613.

[codecov-commenter]

Codecov Report

Attention: Patch coverage is 81.81818% with 2 lines in your changes missing coverage. Please review.

Project coverage is 68.99%. Comparing base (29aaf53) to head (4be4b03).

Files with missing lines	Patch %	Lines
pkg/osvscanner/internal/scanners/lockfile.go	71.42%	1 Missing and 1 partial ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1614      +/-   ##
==========================================
- Coverage   69.34%   68.99%   -0.36%     
==========================================
  Files         200      199       -1     
  Lines       19042    18922     -120     
==========================================
- Hits        13205    13055     -150     
- Misses       5132     5175      +43     
+ Partials      705      692      -13     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.