Ensure we can collect the latest package-lock.json including file indirections for versions

[pombredanne]

Short Description

There are some features we may not support in https://docs.npmjs.com/cli/v9/configuring-npm/package-lock-json?v=true

• hidden lockfiles https://docs.npmjs.com/cli/v9/configuring-npm/package-lock-json?v=true#hidden-lockfiles
• various non versions versions https://docs.npmjs.com/cli/v9/configuring-npm/package-lock-json?v=true#dependencies including all these: bundled dependencies, registry sources, git sources, http tarball sources, local tarball sources, local link sources

[AyanSinhaMahapatra]

From #3981 (review)

We want to:

1. look at all the new features in these lockfile spec, and for each one of them for example see the differences between https://docs.npmjs.com/cli/v10/configuring-npm/package-lock-json and https://docs.npmjs.com/cli/v6/configuring-npm/package-lock-json (you can do a diff for the texts, and do this for other versions of the documentation)
2. add test examples for these by using the github search, add tests like the ones at https://github.com/aboutcode-org/scancode-toolkit/blob/develop/tests/packagedcode/test_npm.py#L253
3. update the package-lock.json parser at https://github.com/aboutcode-org/scancode-toolkit/blob/develop/src/packagedcode/npm.py#L793 to parse and store the additional info

[uttam282005]

@pombredanne @AyanSinhaMahapatra the pr is now ready for review