Catalog python uv.lock files

[willmurphyscode]

What would you like to be added:

A Python cataloger that can understand uv.lock files, see https://docs.astral.sh/uv/concepts/projects/#project-lockfile for general docs.

Additional context:

According to this comment our best source for the structure of this file is to look at the uv code for the moment.

We should make sure the cataloger is extensible so that as new versions of the uv.lock format are released, Syft and switch on the version and parse the new versions.

[jgehrcke]

Thank you for tracking that! Nice.

Indeed, this already is important to various orgs. And importance will only rise from here.