[TRACKING] Complete support for CycloneDX v1.5

[madpah]

see https://github.com/CycloneDX/specification/releases/tag/1.5

The following items are not currently supported for CycloneDX v1.5 (as of release 6.4.x):

• Missing lifecycles on bom.metadata
  see feat: add support for Lifecycles in BOM metadata #698
• Missing modelCard on Component
• Missing data on Component
• Missing bom-ref attribute on OrganizationalContact
• Missing bom-ref attribute on OrganizationalEntity
• Missing bom-ref attribute on LicenseExpression
• Missing licensing on DisjunctiveLicense
• Missing properties on DisjunctiveLicense
• Missing bom-ref attribute on DisjunctiveLicense
• Missing identity on ComponentEvidence
  • see feat: add support for component's evidences according to spec #810
• Missing occurrences on ComponentEvidence
  • see feat: add support for component's evidences according to spec #810
• Missing callstack on ComponentEvidence
  • see feat: add support for component's evidences according to spec #810
• Missing annotations on Bom
• Missing formulation on Bom
• Bom.metadata.tools missing support for components and services along with deprecation of Tool
  • see feat: metadata.tools support components&services #561
  • see AttributeError: There was an AttributeError deserializing JSON to <class 'cyclonedx.model.bom.Bom'> the Property  #597

[jkowalleck]

@madpah, I opened this issue for public contribution