Add the ability to ProjectInfo handle projects not in the active codebase

#3303902: Move ProjectInfo class into package_manager is done, so unpostoning

@TravisCarden updated the comments around the interaction with the UPdate module services. I changed the functionality slightly and will comment on the MR

I have created a new merge request that instead of using the Update module's update processor service creates new package manager update processor service. This eliminates the possibility of a project that we are fetching that is not in the active code getting into the cache of the Update module itself and then being return from global functions such as update_get_available(). It also eliminates the need for use to assume how the update module stores its cache through calls to `\Drupal::keyValueExpirable('update_available_releases')`.

I will comment more on MR

After talking with @TravisCarden we decided this issue is good to commit and I have opened a follow-up to determine if we should just use the new Update processor service for all XML #3308235: Do not use the Update modules cache of UPdate XML so we can control how long it is cached

thanks for the feedback on this @TravisCarden!