Modify the curl importer to support package-first mode

As a part of the ongoing GSoC 2025 project titled "On-demand live evaluation of packages and Integration with VulnTotal".
It should modify the curl importer to support the package-first mode.
After the implementation of this issue, when a user calls the new API endpoint with curl importer, the advisories database should only have those related to the input PackageURL.