feat(sbom): add purls to json test results

[paulrosca-snyk]

Pull Request Submission Checklist

• Follows CONTRIBUTING guidelines
• Includes detailed description of changes
• Contains risk assessment (Low | Medium | High)
• Highlights breaking API changes (if applicable)
• Links to automated tests covering new functionality
• Includes manual testing instructions (if necessary)
• Updates relevant GitBook documentation (PR link: ___)
• Includes product update to be announced in the next stable release notes

What does this PR do?

Upgrades cli-extension-sbom to the latest version. In this version, the --json output of the snyk sbom test command will also include packageUrl as a field on the vulnerability results.

Where should the reviewer start?

How should this be manually tested?

Running the snyk sbom test --experimental --file=PATH_TO_SBOM --json should return a list of vulnerabilities which also contain the package url of the affected package.

What's the product update that needs to be communicated to CLI users?