Improve CycloneDX Support and Update CycloneDX Exports to Spec Version 1.7

FOSSology's CycloneDX agent targets spec 1.4 and omits license texts, copyright notices, and scanner evidence. This project upgrades it to 1.7, adds a formal evidence layer separating scanner findings from human clearing decisions, implements CycloneDX import support, and adds full PHPUnit test coverage.