Complete support for CycloneDX v1.5

[madpah]

The following items are not currently supported for CycloneDX v1.5 (as of release 6.4.x):

• Missing lifecycles on bom.metadata
  see feat: add support for Lifecycles in BOM metadata #698
• Missing modelCard on Component
• Missing data on Component
• Missing bom-ref attribute on OrganizationalContact
• Missing bom-ref attribute on OrganizationalEntity
• Missing bom-ref attribute on LicenseExpression
• Missing licensing on DisjunctiveLicense
• Missing properties on DisjunctiveLicense
• Missing bom-ref attribute on DisjunctiveLicense
• Missing identity on ComponentEvidence
• Missing occurrences on ComponentEvidence
• Missing callstack on ComponentEvidence
• Missing annotations on Bom
• Missing formulation on Bom
• Bom.metadata.tools missing support for components and services along with deprecation of Tool
  • see feat: metadata.tools support components&services #561
  • see AttributeError: There was an AttributeError deserializing JSON to <class 'cyclonedx.model.bom.Bom'> the Property  #597

[jkowalleck]

@madpah, I opened this issue for public contribution