fix: Add support for SwiftPM v2 lockfiles

[elldritch]

Overview

This PR implements PS-26, adding support for SwiftPM v2 Package.resolved files.

Acceptance criteria

SwiftPM projects using version 2 of Package.resolved now analyze correctly.

Testing plan

Find a SwiftPM project using v2 of Package.resolved and analyze it. Some example projects:

• https://github.com/09samit/GlobalPackage/tree/31a4219be5bff7bea1ab64fc5897fc2e1cdf5d24
• https://github.com/mafmendes/AppSeries/blob/main/AppSeriesNew.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved
• https://github.com/sedlakp/freeApiApp/blob/master/free-apis.xcodeproj/project.xcworkspace/xcshareddata/swiftpm/Package.resolved
• CxxLibrary.zip

References

• https://fossa.atlassian.net/browse/PS-26

Checklist

• I added tests for this PR's change (or explained in the PR description why tests don't make sense).
• If this PR introduced a user-visible change, I added documentation into docs/.
• If this change is externally visible, I updated Changelog.md. If this PR did not mark a release, I added my changes into an # Unreleased section at the top.
• If I made changes to .fossa.yml or fossa-deps.{json.yml}, I updated docs/references/files/*.schema.json. You may also need to update these if you have added/removed new dependency type (e.g. pip) or analysis target type (e.g. poetry).

[meghfossa]

🚀