bug(pom): Trivy doesn't overwrite version from depManagement if dependency uses `project.groupId` prop

[DmitriyLewen]

Description

There are cases when dependency uses project.groupId property
e.g. https://repo1.maven.org/maven2/io/netty/netty-handler/4.1.114.Final/netty-handler-4.1.114.Final.pom :

<groupId>${project.groupId}</groupId>
<artifactId>netty-common</artifactId>
<version>${project.version}</version>

For this cases Trivy doesn't overwrite these dependencies.
See #8036 for example.

Discussed in #8036