fix(sbom): use root package for unknown dependencies (if exists) [backport: release/v0.58]

fix(sbom): use root package for unknown dependencies (if exists) [backport: release/v0.58] #12681