[IDEA] feat: importer to make deserialization easier

now taht we have validators, it should be possible to write an importer, like the `outputter`s ...

it should take an arbitrary string,
detect the schema from it, and validate against it
if no schema can be detected, then try trom latest to odest ...

if validaion fails: throw
else: return BOM

tesying: integration test is fine
- load the CDX test data, serialize again, and check for valid data or equalness...

this should imprive the deserialization a lot