Relates to #1, #2, #235
Summary
Enhance the ghasum list <target> command by supporting a workflow target (e.g. ghasum list .github/workflows/workflow.yml) as well as job target (e.g. ghasum list .github/workflows/workflow.yml:job-key) - similar to ghasum verify. If such a target is specified it should only list the dependencies introduced through that workflow or job.