POC: [NX-496] Component metadata api

https://issues.sonatype.org/browse/NX-496
The "SecondaryMetadata" term doesn't speak much to me; my understanding would benefit from JavaDoc or a more descriptive name...