Improvement: Apply Regex check to `Component.cpe`

The CycloneDX scpecification defines a Regex for `Component.cpe`, but this library does not enforce this.

see https://github.com/CycloneDX/specification/blob/c320fc0f0b46873864927d9d5684eea7ba439728/schema/bom-1.5.xsd#L1110-L1112

Start at the Component.cpe entry point and compare its requirements with the linked CycloneDX schema regex. Done means CPE values are checked against that regex, with focused coverage for valid and invalid values.

由索引模型根据 Issue 内容生成。