feat: group DSA and its CVEs together

[hogo6002]

For container scanning, we should only display DSA results and hide their related CVEs.

• Add DSA's related CVEs to the same group.
• Sort the group IDs with the DSA first. (DSA is more important than CVE, and one DSA contains multiple CVEs)
• Don't print CVE records when there is a DSA (this reduces noise in container scanning results).

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 68.32%. Comparing base (1856add) to head (710aa96).
Report is 2 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #1262      +/-   ##
==========================================
+ Coverage   68.29%   68.32%   +0.03%     
==========================================
  Files         175      175              
  Lines       16764    16776      +12     
==========================================
+ Hits        11449    11463      +14     
+ Misses       4682     4681       -1     
+ Partials      633      632       -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[another-rex]

Thanks! Added some comments.

[another-rex]

LGTM!