Accept an SBOM as the input for Macaron

**Description**
Up until now, Macaron only accepts the repo URL of the main analysis target (e.g. `--rp https://github.com/micronaut-projects/micronaut-core`) as the entrypoint. This behavior, however, comes as a limitation when we want to support running the analysis against a generated SBOM of the analysis target. 
