switch depgraph discovery stuff and autoprox decorator to be more resilient of null StoreKey's, allow the aprox DiscoverySourceManager to take a normal URL and search for the remote repo that wraps it. Switch BOM renderer over to use DTO that's more like the one used for generating download logs, url-maps, or repository zips. Add a notion of excluded GAV subgraphs to repository-content collection DTOs.