Validate CycloneDX SBOM

[pombredanne]

See subissues to support extensive validation of CycloneDX SBOMs.

There are efforts in progress also to consider:

• https://github.com/OpenChain-Project/SBOM-sg-SEPIA by @NikolaBabadzhanov and @HansMKern Tool name: SEPIA workshop#49
• https://github.com/OpenChain-Project/Telco-WG/tree/main/tools/openchain_telco_sbom_validator by @vargenau and @CsatariGergely Tool name: openchain-telco-sbom-validator workshop#19