refactor the plugin to make integration-tests possible

[jkowalleck]

currently the code of CycloneDX\Composer\Plugin is not integration-testable in a good way, and needs some love.

since the whole code is marked as @internal a refactoring can be done without causing breaking changes.