Add support for configuring reviewed and ignored dependencies at specific versions

[jonabc]

This builds off of the configuration changes made in #560 to bring in full support for configuring reviewed and ignored dependencies that include version identifiers.

Version identifiers are given by adding @... to the end of dependency names in the reviewed and ignored configuration lists. Identifiers can have the following values:

1. * - explicitly match all versions
2. a value that can be parsed by Gem::Requirement provides support for version ranges - (=|<|<=|>|>=|~>) 1.2.3. For non-Ruby devs, the ~> is called the twiddle-waka and is a pessimistic matcher similar to node's tilda range operator.
   • Multiple ranges can be specified as a single string separated by commas - dependency@>= 1.0.0, < 2.0.0
3. a value that can't be parsed by Gem::Requirement will be compared with an exact string match to a found dependency's version

This mostly affects the pnpm source at the moment, which requires reviewing and ignoring dependencies using @.... For other sources, the change is expected to be backwards compatible and users should only expect changes when configuring dependencies at specific versions or specific version ranges.

[jonabc]

The gradle failures are related to a current Gradle version bump to 8.0.1 in CI, and not directly attributed to anything done here. I've put together a potential fix for that separately. I'm going to merge this as-is, and when the gradle fix is looking alright both changes can be released with a minor version bump to licensed.