Change public to internal for deserialization model classes that are
implementation details across multiple detector ecosystems: conan,
pnpm, swiftpm, vcpkg, rust (CargoLock, CargoToml, CargoSbom), poetry,
yarn (Berry contracts, TypeConverter), npm (converters), pip
(PipReportGraphNode, PythonVersion), and uv model classes.

Types exposed through public interfaces/APIs are left public to
maintain build compatibility.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Make ~80 classes internal in the Detectors project:

- Data model/contract classes (ConanLock, PnpmYaml variants, PoetryLock,
  SwiftResolvedFile, VcpkgSBOM, CargoToml/Sbom, YarnBerry types, npm
  converters, PipReportGraphNode, PythonVersion, UvLock/Package, etc.)
- Parser implementations (GoModParser, YarnLockParser, RustCargoLockParser,
  MavenStyleDependencyGraphParserService, PnpmParsingUtilities, etc.)
- Concrete detector classes (NpmComponentDetector, NuGetComponentDetector,
  GoComponentDetector, RustSbomDetector, etc.)
- Linux scanner internals (LinuxScanner, all component factories, filters)
- Service implementations (MavenCommandService, PythonCommandService,
  PyPiClient, PipCommandService, YarnLockFileFactory, etc.)

Kept public (used by downstream consumers):
- All interfaces (IComponentDetector, IMavenCommandService, etc.)
- MvnCliComponentDetector, MavenWithFallbackDetector (used in is-checks)
- PipComponentDetector, SimplePipComponentDetector, PipReportComponentDetector
  (mocked in tests by component-detection-internal)

Updated test classes to work with internal types via InternalsVisibleTo.

Part of #455

Make ~50 classes internal in the Common project:

- Telemetry records (~34 concrete classes): NuGetProjectAssetsTelemetryRecord,
  PyPiCacheTelemetryRecord, LinuxScannerTelemetryRecord, etc.
  Kept BaseDetectionTelemetryRecord public for external subclassing.
- Utility classes: Column, TabularStringFormat, ComponentComparer,
  DependencyScopeComparer, DirectoryItemFacade(Optimized)
- Docker reference exceptions (11 classes)
- Concrete service implementations: CommandLineInvocationService,
  EnvironmentVariableService, PathUtilityService, FileUtilityService,
  DirectoryUtilityService, DockerService, ConsoleWritingService,
  SafeFileEnumerableFactory, ComponentStreamEnumerableFactory,
  FastDirectoryWalkerFactory

Kept public: FileWritingService, ComponentStream, LazyComponentStream,
ComponentRecorder, CommandLineInvocationResult, CommandLineTelemetryService,
BaseDetectionTelemetryRecord, and all interfaces.

Part of #455

Make 8 classes internal in the Orchestrator project:

- Converter classes: CommaDelimitedConverter, KeyValueDelimitedConverter,
  SemicolonDelimitedConverter
- CLI helpers: ArgumentHelper, IArgumentHelper
- Concrete service implementations: DetectorProcessingService,
  DetectorRestrictionService, DefaultGraphTranslationService

Kept public: ServiceCollectionExtensions, ScanExecutionService, ScanCommand,
ScanSettings, LoggingEnricher, DetectorRestrictions, all experiment types,
all service interfaces, DetectorRunResult, DetectorProcessingResult.

Part of #455

Enable the CA1515 analyzer rule ("Make class internal") in
.editorconfig to prevent new unnecessary public types from
accumulating in the future.

This rule requires .NET 9+ SDK to enforce. Once the SDK is
upgraded, any new public class that could be internal will
produce a build warning.

Part of #455