Reporting: Add to License Report List of 3rd Party Components

[mcjaeger]

original: https://github.com/eclipse/sw360/issues/375

For the license report of a project:

There should be a new section with the following table listing the involved third party components:

• no hierarchy (just as in clearing status)
• information can be pulled entirely from sw360

Vendor + Component Name	Release version	Source Attachment SHA1	Source Attachment Name	Component Type	Main Licenses(s) SPDX-ID
Apache Ant	1.9.6	df8f3ee60d5950f76e790f426cecdb74	ant-1.9.6-sources.jar	OSS	Apache-2.0
...	...	...	...	...	...

[dreh23]

WIP