feat: ignore overlapping fixed vulns for rpm + more

[kzantow]

This PR is a follow-on to apply changes from #3286 and #3282 across other matchers. This PR (as well as the alternate implementation in #3304) have the result of fixing quite a lot of the reported SLES issues where we have fixed information for specific RPM packages but the Python or other language packages erroneously result in the same vulnerability.

An example using SLES 15.6 and urllib3 (with docker build -t suse-overlap:latest):

FROM registry.suse.com/suse/sle15:15.6
RUN zypper in -y --no-recommends python311-urllib3=2.0.7-150400.7.21.1

Based on the vulnerabilities in the Grype database for 15.6:

$ grype db search python311-urllib3 --distro sles:15.6   
VULNERABILITY   PACKAGE            ECOSYSTEM  NAMESPACE              VERSION CONSTRAINT       
CVE-2016-9015   python311-urllib3  rpm        sles:distro:sles:15.6  < 0:2.0.7-150400.7.11.1  
CVE-2018-20060  python311-urllib3  rpm        sles:distro:sles:15.6  < 0:2.0.7-150400.7.11.1  
CVE-2019-11236  python311-urllib3  rpm        sles:distro:sles:15.6  < 0:2.0.7-150400.7.11.1  
CVE-2019-11324  python311-urllib3  rpm        sles:distro:sles:15.6  < 0:2.0.7-150400.7.11.1  
CVE-2019-9740   python311-urllib3  rpm        sles:distro:sles:15.6  < 0:2.0.7-150400.7.11.1  
CVE-2020-26137  python311-urllib3  rpm        sles:distro:sles:15.6  < 0:2.0.7-150400.7.11.1  
CVE-2021-33503  python311-urllib3  rpm        sles:distro:sles:15.6  < 0:2.0.7-150400.7.11.1  
CVE-2023-43804  python311-urllib3  rpm        sles:distro:sles:15.6  < 0:2.0.7-150400.7.11.1  
CVE-2023-45803  python311-urllib3  rpm        sles:distro:sles:15.6  < 0:2.0.7-150400.7.11.1  
CVE-2024-37891  python311-urllib3  rpm        sles:distro:sles:15.6  < 0:2.0.7-150400.7.18.1  
CVE-2025-50181  python311-urllib3  rpm        sles:distro:sles:15.6  < 0:2.0.7-150400.7.21.1

Current grype reports:

$ grype -v suse-overlap:latest --by-cve -q | grep urllib3
urllib3                     2.0.7                  2.2.2                                                   python     CVE-2024-37891       Medium    0.3% (49th)    0.1    
urllib3                     2.0.7                  2.5.0                                                   python     CVE-2025-50181       Medium    < 0.1% (23rd)  < 0.1  
urllib3                     2.0.7                  2.6.0                                                   python     CVE-2025-66418       High      < 0.1% (9th)   < 0.1  
urllib3                     2.0.7                  2.6.0                                                   python     CVE-2025-66471       High      < 0.1% (8th)   < 0.1  
urllib3                     2.0.7                  2.6.3                                                   python     CVE-2026-21441       High      < 0.1% (7th)   < 0.1  

This branch reports:

$ go run ./cmd/grype -v suse-overlap:latest --by-cve -q | grep urllib3
urllib3                     2.0.7                  2.6.0                                                   python     CVE-2025-66418       High      < 0.1% (9th)   < 0.1  
urllib3                     2.0.7                  2.6.0                                                   python     CVE-2025-66471       High      < 0.1% (8th)   < 0.1  
urllib3                     2.0.7                  2.6.3                                                   python     CVE-2026-21441       High      < 0.1% (7th)   < 0.1  

Note the removal of:

urllib3                     2.0.7                   2.2.2                          python     CVE-2024-37891       Medium    0.3% (49th)    0.1    
urllib3                     2.0.7                   2.5.0                          python     CVE-2025-50181       Medium    < 0.1% (7th)   < 0.1  

These 2 vulnerabilities are reported in the SUSE data as fixed.

Fixes: #3368