Read Maven configurations from `settings.xml`

[cuixq]

settings.xml contains the information about:

• registry: local repository, remote repository servers, and authentication information
• project: profiles and properties

To give a better support for Maven dependency resolution, configurations should be read from settings.xml.

[github-actions[bot]]

This issue has not had any activity for 60 days and will be automatically closed in two weeks

See https://github.com/google/osv-scanner/blob/main/CONTRIBUTING.md for how to contribute a PR if you're interested in helping out.

[oliverchang]

@michaelkedar this is part of the auth support right?

[michaelkedar]

settings.xml parsing for auth is complete.

We haven't parsed them for profiles, however.