Clean up package structure to avoid split package usage

[nscuro]

We currently have multiple modules that have classes in the org.hyades package. Quarkus is warning about this being bad practice on every startup:

Detected a split package usage which is considered a bad practice and should be avoided. Following packages were detected in multiple archives: 
- "org.hyades.config" found in [org.hyades:commons::jar, org.hyades:vulnerability-analyzer::jar]

Classes should be moved to more dedicated packages such that no two modules share the exact same package.