CM-59977 sca cli maintainability improvements

[omerr-cycode]

Changes:

• Split NPM restore to separate handlers instead of one NPM that captures *.json and tried falling back across package managers. (restore_yarn_dependencies.py, restore_pnpm_dependencies.py, restore_deno_dependencies.py)
• Added signal checks when only package.json appears to differentiate between Yarn, PNPM, and NPM.
• Added Poetry handler. When only pyproject.toml exists, checks for [tool.poetry].
• Added Pipenv handler
• Added PHP Composer handler
• NPM is registered after Yarn, pnpm, and Deno in the handler list, serving as the fallback.
• Switched usage from os.path to pathlib in most restore related files.
• Moved some SCA-related parameters to a common module to apply for scan & sbom creation.
• --no-restore and --gradle-all-sub-projects options added to sbom report generation.
• SCA lock restore section rewritten with a full ecosystem table (manifest → lockfile → command).
• SBOM path command options table updated to include --no-restore and --gradle-all-sub-projects.
• Added constant for cdx 1.6 sbom