feat(pypi): add pyproject.toml support to IntelliJ plugin

Add component analysis support for pyproject.toml manifest files,
enabling inline vulnerability diagnostics for Python projects using
PEP 621 ([project.dependencies]) and Poetry
([tool.poetry.dependencies]) formats.

New classes:
- PyprojectCAAnnotator: extracts dependencies from TOML PSI structure
- PyprojectCAIntentionAction: quick-fix for version updates
- PyprojectCAInspection: inspection registration

Modified files:
- SaAction, SaUtils: recognize pyproject.toml as supported manifest
- CAAnnotator, SAIntentionAction: add pyproject.toml to python mapping
- ApiService: apply Python-specific settings for pyproject.toml
- plugin.xml: register annotator and inspection for TOML language
- README.md: document pyproject.toml support

Implements TC-3853

Assisted-by: Claude Code

Author: ruromero

README.md

@@ -21,7 +21,7 @@ while you build your application.
 - Gradle Kotlin and Groovy (gradle)
 - Golang (go mod)
 - Rust (cargo)
-- Python (pip) ecosystems, and base images in Dockerfile.
+- Python (pip, pyproject.toml) ecosystems, and base images in Dockerfile.
 
 In future releases, Red Hat plans to support other package managers.
 
@@ -108,7 +108,7 @@ according to your preferences.
   dependencies for Rust projects.
   <br >If the path is not provided, your IDE's `PATH` environment will be used to locate the executable.
 
-- **Python** (`requirements.txt`) :
+- **Python** (`requirements.txt`, `pyproject.toml`) :
   <br >Set the full paths of the Python and the package installer for Python executables, which allows Exhort to locate
   and run the `pip3` commands to resolve dependencies for Python projects.
   <br >Python 2 executables `python` and `pip` can be used instead, if the `Use python 2.x` option is selected.
@@ -318,6 +318,21 @@ When modifying the grammar or lexer files, you need to regenerate the parser cla
   tokio = { version = "1.0", features = ["full"] } # trustify-da-ignore
   ```
 
+  If you want to ignore vulnerabilities for a dependency in a `pyproject.toml` file, you must add `trustify-da-ignore` as a comment
+  against the dependency in the manifest file.
+  For PEP 621 format:
+  ```toml
+  [project]
+  dependencies = [
+      "anyio==3.6.2",  # trustify-da-ignore
+  ]
+  ```
+  For Poetry format:
+  ```toml
+  [tool.poetry.dependencies]
+  anyio = "^3.6.2"  # trustify-da-ignore
+  ```
+
 - **Excluding developmental or test dependencies**
   <br >Red Hat Dependency Analytics does not analyze dependencies marked as `dev` or `test`, these dependencies are
   ignored.
@@ -365,6 +380,10 @@ When modifying the grammar or lexer files, you need to regenerate the parser cla
   You can create an alternative file to `requirements.txt`, for example, a `requirements-dev.txt` or
   a `requirements-test.txt` file where you can add the development or test dependencies there.
 
+  For `pyproject.toml`, only production dependencies from `[project.dependencies]` (PEP 621) and
+  `[tool.poetry.dependencies]` are analyzed. Optional dependencies (`[project.optional-dependencies]`)
+  and Poetry group dependencies (`[tool.poetry.group.*.dependencies]`) are excluded.
+
 
 - **Excluding manifest files with patterns**
   <br >You can exclude specific manifest files from component analysis using configurable glob patterns. This feature allows you to avoid analyzing third-party dependencies, test files, or other manifests that are not relevant to your security analysis.

src/main/java/org/jboss/tools/intellij/componentanalysis/CAAnnotator.java

@@ -274,7 +274,7 @@ public static String getPackageManager(String file) {
             case "pom.xml" -> "maven";
             case "package.json" -> "npm";
             case "go.mod" -> "go";
-            case "requirements.txt" -> "python";
+            case "requirements.txt", "pyproject.toml" -> "python";
             case "build.gradle", "build.gradle.kts" -> "gradle";
             case "Cargo.toml" -> "cargo";
             default -> null;

src/main/java/org/jboss/tools/intellij/componentanalysis/SAIntentionAction.java

@@ -49,7 +49,8 @@ public boolean isAvailable(@NotNull Project project, Editor editor, PsiFile file
                 || "requirements.txt".equals(file.getName())
                 || "build.gradle".equals(file.getName())
                 || "build.gradle.kts".equals(file.getName())
-                || "Cargo.toml".equals(file.getName());
+                || "Cargo.toml".equals(file.getName())
+                || "pyproject.toml".equals(file.getName());
     }
 
     @Override