[BUG] missing properties for "private", "development" and "bundled" dependnecies

## Describe the bug

With https://github.com/CycloneDX/cyclonedx-node-npm/pull/1307, dependencies that are for development only might not be marked in the resulting SBOM properly.

need to revisit the tests and see the current results

## To Reproduce

test setups came via https://github.com/CycloneDX/cyclonedx-node-npm/pull/1329

## Expected behavior

- dev dependnecies are marked as such via properties, according to https://github.com/CycloneDX/cyclonedx-property-taxonomy/blob/main/cdx/npm.md
- bundled dependencies are marked as such via properties, according to https://github.com/CycloneDX/cyclonedx-property-taxonomy/blob/main/cdx/npm.md

## Screenshots or output-paste

If applicable, add screenshots or past the output to help explain your problem.
If possible, show which CLI command was run, which parameters were used, and run with CLI switch `-vvv` for more debug information.

## Environment

- _@cyclonedx/cyclonedx-npm_ version:
- NPM version:
- Node version:
- OS:

## Additional context

Add any other context about the problem here.

## Contribution

- [x] I am willing to provide a fix
- [ ] I will wait until somebody else fixes it