[FEATURE] Upgrade cyclonedx-bom dependency

[rxm7706]

• What are you trying to do?
  jake currently uses cyclonedx-bom 3, cyclonedx-bom 4 was released in Jan 2024.
• What feature or behavior is this required for?
  Update to use latest versions of dependency
• How could we solve this issue? (Not knowing is okay!)
  https://github.com/sonatype-nexus-community/jake/blob/49b6e8aac0a3a9b80094b3f0fa6d7c83420abf4d/pyproject.toml#L61C1-L61C25
  Update cyclonedx-bom = "^3.0.0" to cyclonedx-bom = "^4.0.0"
• Anything else?

cc @bhamail / @DarthHater

[madpah]

So cyclonedx-bom has a depedency on packageurl-python, as does ossindex-lib. Requirements conflict - suggest we drop ossindex-lib in favour of ossindex-api-client new generated API Client Library.

[bhamail]

Fine by me, given ossindex-lib is not very active, and ossindex-api-client is active.