Add Output Format CycloneDX for integration with Dependency-Track

**Is your feature request related to a problem? Please describe.**
Early versions of dependency-track were able to import output of dependency-check. However, the import capability has been removed from dependency-track some time ago. It would be beneficial for e.g. monitoring released software for new vulnerabilities, if the output of dependency-check could be fed into dependency-track, so that the as-built state of the software can be preserved, while new vulnerabilities can be highlighted without requiring another scan.

**Describe the solution you'd like**
Add support for output in CycloneDX2.0 format to dependency-check. All required information seems to be included in the XML output, and applying an XSLT stylesheet to the XML output will create CycloneDX2.0 compatible XML files that can be used with dependency-track.

**Describe alternatives you've considered**
Rescanning builds for vulnerabilities when delivered to production is time and resource consuming. If multiple projects are involved, it becomes difficult to get an overview of scan results with dependency-check alone. Dependency-Track solves this issue.

**Additional context**
GIST with conversion XSLT stylesheet here: https://gist.github.com/gl-mc/9f530efb217a65e3581055d575f95f9f