feat: create GeneratedFrom relationship from CycloneDX dependencies

Fixes #1131

I'm not entirely sure my right and left is correct, because I don't
fully grok the expected output of `analysis/root-component` and
`analysis/dep`.

Signed-off-by: Jim Crossley <[email protected]>

Author: jcrossley3