[BREAKING] Refactor to use @cyclonedx/cyclonedx-library

[madpah]

There are a number of data types defined in js-sona-types that have officially defined equivalents in the official CycloneDX library @cyclonedx/cyclonedx-library - makes sense to use that!

[madpah]

Given we this issue, sonatype-nexus-community/nexus-iq-chrome-extension#267 was raised to resolve it, but it is likely better practice to replace the internals of this library rather than break downstream consumers.

This feature should replace the internals that produce CycloneDX with @cyclonedx/cyclonedx-library' whilst (at least initially) maintaining the same interface for consumers of @sonatype/js-sona-types`.