POC: [NX-496] Component metadata api

https://issues.sonatype.org/browse/NX-496
Yeah, I think by looking at the "format", that will often be a good signal as to what other kind of related metadata might be available for the component. (e.g. identity.format == 'maven', so query for the 'maven' metadata record with this identity key)