feat(sbom): Add support for CycloneDX 1.7 specification

[DmitriyLewen]

Description:

Trivy currently fails to decode CycloneDX 1.7 SBOMs with the error invalid specification version.

$ trivy sbom merged.cdx.json
FATAL	Fatal error	run error: sbom scan error: scan error: scan failed: failed analysis: SBOM decode error: failed to decode: CycloneDX decode error: CycloneDX decode error: invalid specification version

Root Cause

The upstream library https://github.com/CycloneDX/cyclonedx-go does not yet support version 1.7.
Upstream tracking issue: CycloneDX/cyclonedx-go#247

References

• Discussion: Support CycloneDX 1.7 SBOMs #10184
• Spec 1.7 support CycloneDX/cyclonedx-go#247