Fix CDX spec version issue

[attiasas]

• The pull request is targeting the dev branch.
• The code has been validated to compile successfully by running go vet ./....
• The code has been formatted properly using go fmt ./....
• All static analysis checks passed.
• All tests have passed. If this feature is not already covered by the tests, new tests have been added.
• Updated the Contributing page / ReadMe page / CI Workflow files if needed.
• All changes are detailed at the description. if not already covered at JFrog Documentation, new documentation have been added.

---

depends on:

• New BOM with Spec Version CycloneDX/cyclonedx-go#266
• https://github.jfrog.info/JFROG/xray-scan-lib/pull/97

---

following:

• Add comprehensive support for CycloneDX 1.7 specification CycloneDX/cyclonedx-go#257

Broke the default spec, resulting in: (xray-scan-lib still not upgraded)

reading body gob: type mismatch in decoder: want struct type cyclonedx.EvidenceIdentityChoice; got non-struct