Fix SBOM component ref compare

[kerenr-jfrog]

• The pull request is targeting the dev branch.
• The code has been validated to compile successfully by running go vet ./....
• The code has been formatted properly using go fmt ./....
• All static analysis checks passed.
• All tests have passed. If this feature is not already covered by the tests, new tests have been added.
• Updated the Contributing page / ReadMe page / CI Workflow files if needed.
• All changes are detailed at the description. if not already covered at JFrog Documentation, new documentation have been added.

---

• Added logic for cases we want to compare between SBOM components from two different scans and exclude the similar components.

[attiasas]

LGTM!
Please add another test case where PackageURL values has the hash suffix so you can see it works

[attiasas]

LGTM, don't forget to merge dev before merge

[github-actions]

---

🐸 JFrog Frogbot