Feature: support non-NPM packages

[wwahammy]

Currently, noticeme is hardcoded to only create NOTICE files for packages hosted on NPM. While this covers the vast majority of cases, a project could be using packages from Github packages or another package registry or which are included via reference to a git repo, branch, tag or commit.

For this to be completed, noticeme MUST have the following feature:

• verify that @npmcli/arborist includes this kind of info. If it doesn't, we need a way to get that info from the package.json and included.json
• pass the proper coordinates to the ClearlyDefined API.