reading projects on report ingestion (only reports with job_id)

[vjeffrey]

User Story

as part of #483
we tagged reports coming in from remote scans with projects on job creation.

this functionality is enabled by inspec/inspec#3906
this information is expected to come in on the report in the following format:

{
  "node_uuid": "123..",
  "passthrough": {
     "projects": [],
  }
}

we'll need to make sure that we are handling the case where the projects come in in this format as well as the one where it is on the report itself

Definition of Done

can filter on projects whether the projects field is on the root of the report or a subkey of the passthrough field (alias field in elasticsearch?)