SCTK: resolve npm dependencies based on lockfiles, using a new option

[pombredanne]

• We have a project with a package.json and a package-lock.json or yarn.lock (and the future pnpm)
• We should be able to create the new "resolved" packages and the relationship using the new models and this data
• We need the corresponding new SCTK models as per:
  • RFC: Design improved relationships for Package, Dependencies, Embeds and Requirements  scancode.io#1066

[pombredanne]

@AyanSinhaMahapatra I think this is completed, is it?

[pombredanne]

This is done, but not with an option