feat: include `component.evidence.identity` in the SBOM

## Is your feature request related to a problem? Please describe.

Establishing accurate component identity is important in an SBOM, as it enables users to clearly understand how each component's identity was determined and the methods applied in this process.

## Describe the solution you'd like

By including Component's `.evidence.identity` within the SBOM, we provide transparency on the techniques and data sources used to verify component identity, enhancing both the reliability and trustworthiness of the SBOM.

https://cyclonedx.org/docs/1.6/json/#components_items_evidence_identity

该 issue 未指出任何实现文件或测试。先跟踪组件在哪里被序列化到 SBOM 中，然后将输出与链接的 CycloneDX 1.6 中关于 components.evidence.identity 的定义进行比较。当生成的 SBOM 输出包含所请求的身份证据时，即表示完成。

由索引模型根据 Issue 内容生成。