TC-2279 HasSBOM retrieve by package when SBOM relates to arfifact

[mrizzi]

Description of the PR

Fixes https://issues.redhat.com/browse/TC-2279

Depends on:

• TC-2279 has_sbom: subject artifact management  guac-rs#79
• TC-2279 Bump guac 0.7.2-1 trustification#2183
• [release/1.3.z] TC-2279 Bump guac 0.7.2-1 trustification#2186

being merged to avoid breaking trustification.

Updated action/cache due to actions/cache#1510

PR Checklist

• All commits have a Developer Certificate of Origin (DCO) -- they are generated using -s flag to git commit.
• All new changes are covered by tests
• If GraphQL schema is changed, make generate has been run
• If collectsub protobuf has been changed, make proto has been run
• All CI checks are passing (tests and formatting)
• All dependent PRs have already been merged

[mrizzi]

Regression tests are fine and I've added the new one covering the issue so I'm going to merge this.