Improvement: Apply Regex check to Component.cpe

[madpah]

The CycloneDX scpecification defines a Regex for Component.cpe, but this library does not enforce this.

see https://github.com/CycloneDX/specification/blob/c320fc0f0b46873864927d9d5684eea7ba439728/schema/bom-1.5.xsd#L1110-L1112

[saquibsaifee]

@madpah and @jkowalleck I opened up #706 to add this validation feature.

[jkowalleck]

CPE is a complex, external spec - outside the domain of CycloneDX.
This fact leads me to the architectural decision: we do not want to maintain an implementation of this external spec in the domain of CycloneDX python library.

we might consider a usage of an external library, like https://pypi.org/project/cpe/.

PS: we have an schema-based validator in place already, so there already is a mechanism that can check for valid CPE.
This means: there is no REAL reason to implement this in the first place -- it is a nice to have.

[jkowalleck]

An enforcement of valid CPE would be considered a breaking change.
It is undecided, whether this is a requirement or not... the provided solution will show.