DRAFT: Fix cargo version parsing for caret, tilde, and pre-release versions

[zahidblackduck]

JIRA Ticket

IDETECT-5056

Description

This pull request aims to fix the cargo detectors failing with NumberFormatException when Cargo.toml version strings contain operator prefixes (^, ~) or pre-release tags (-alpha, -rc1). For example, syslog = "^6.0" caused extraction failure because the parser attempted to parse "^6" as an integer.

Root Cause

VersionUtils.versionMatches() handled comparison operators (>=, >, <=, <, =) but not ^ or ~, and compareVersions() did not strip pre-release or build metadata before parsing.

Implementation

• Introduced a CargoOperator enum inside VersionUtils to represent valid Cargo version operators
• Added caret and tilde range matching using upper-bound checks
• Refactored stripBuildMetadata() to sanitizeVersion() to also strip pre-release tags before numeric parsing
• Add unit tests for version matching in VersionUtilsTest

---

N.B: This pull request is meant to be shipped with detect 11.5.0