Static-SCA: Fix direct component in Sbom calculation for impacted component

[attiasas]

• The pull request is targeting the dev branch.
• The code has been validated to compile successfully by running go vet ./....
• The code has been formatted properly using go fmt ./....
• All static analysis checks passed.
• All tests have passed. If this feature is not already covered by the tests, new tests have been added.
• Updated the Contributing page / ReadMe page / CI Workflow files if needed.
• All changes are detailed at the description. if not already covered at JFrog Documentation, new documentation have been added.

---

We calculated the direct components as the direct parent of the impacted component.
This PR fixes the issue and caclulate the actual direct components in the SBOM for the given impacted component.

In addition:

1. adding id attribute to simple-json ComponentRow struct with the component BomRef/XrayComponentId
2. adding location to impact paths as well, if provided.

[eranturgeman]

Looks great! see my notes and please add in the pr detains what is the addition of the property

[github-actions]

---

🐸 JFrog Frogbot