Enhance report about resolved vulnerabilities to include "updated to" for affected dependencies

[ckunki]

See Nox session vulnerabilities:resolved added in #402.

Function get_dependencies could allow a user to retun .all_dependencies instead of only .direct_dependencies.
See https://github.com/exasol/python-toolbox/blob/main/exasol/toolbox/util/dependencies/poetry_dependencies.py#L164

This would in turn augment the output provided in release:prepare.

[ArBridgeman]

Ah, so there is a potential blocker for this. While working on #803, I tried to adapt the PoetryToml.groups to separate out optional dependencies. That is possible, BUT this causes issues when we try to sort dependencies in PoetryDependencies.direct_dependencies as the command poetry show does NOT provide a way to distinguish between optional dependencies and main dependencies.

As we do NOT have optional groups separately listed in PoetryToml.groups, a project's optional dependencies will still be listed in the PR but as main dependencies. Maybe there's a clever way I haven't thought of to distinguish these.

Otherwise, I can say that in uv that this is much easier.

For a more detailed (and albeit semi-chaotic) level of information, please check out this comment from #803.