POC: [NX-496] Component metadata api

https://issues.sonatype.org/browse/NX-496
agree on a common place, but i think with the shift to orient we can get away with JPA @Id and @Version annotations in the pojos, which would avoid the need to expose them separately in the api altogether