related to #404
related to CycloneDX/cyclonedx-node-module#343
related to CycloneDX/cyclonedx-node-npm#256
related to CycloneDX/cyclonedx-webpack-plugin#676

to implement license evidences downstream it is required to have the needed models.

see https://cyclonedx.org/docs/1.3/json/#components_items_evidence
see https://cyclonedx.org/docs/1.3/xml/#type_componentEvidenceType

✍️ name shall be ComponentEvidence.

• texts are stringables - so they could be buffers or whatsoever ...
  -> maybe exiting data models need to be widened.
• models & tests
• JSON normalizer & tests
• XML normalizer & tests

❗ this is considered a BREAKING change, as a protocol/interface will need to change.