Allow to upload source archives (ZIP etc.) for analysis / scanning

[sschuberth]

In several use-cases no direct access to a VCS is provided, but source code for analysis / scanning is handed over in some archive format containing only the source code (and e.g. no .git directory). We should support such cases both from the UI and backend once ORT core has implemented the required changes to the project provenance model.