SSVL: implement gitops support for labels include/exclude on software packages

[mna]

#24554

Checklist for submitter

• Changes file added for user-visible changes in changes/, orbit/changes/ or ee/fleetd-chrome/changes.
  See Changes files for more information.
• Input data is properly validated, SELECT * is avoided, SQL injection is prevented (using placeholders for values in statements)
• Added/updated tests
• Manual QA for all new/changed functionality

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Please upload report for BASE (feat-labels-scoped-software@129eabe). Learn more about missing BASE report.

Additional details and impacted files

@@                      Coverage Diff                       @@
##             feat-labels-scoped-software   #24663   +/-   ##
==============================================================
  Coverage                               ?   63.57%           
==============================================================
  Files                                  ?     1598           
  Lines                                  ?   151433           
  Branches                               ?     3833           
==============================================================
  Hits                                   ?    96272           
  Misses                                 ?    47504           
  Partials                               ?     7657           

Flag	Coverage Δ
backend	64.36% <100.00%> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.