Add detector for CycloneDX SBOMs

Similar to the support that we have for SPDX SBOMs in [`Spdx22ComponentDetector`][1], we should also add support for CycloneDX SBOMs.

References:
- [CycloneDX specification][2]
- [CycloneDX NuGet package][3]

[1]: https://github.com/microsoft/component-detection/blob/main/src/Microsoft.ComponentDetection.Detectors/spdx/Spdx22ComponentDetector.cs
[2]: https://cyclonedx.org/specification/overview/
[3]: https://www.nuget.org/packages/CycloneDX/

Start with src/Microsoft.ComponentDetection.Detectors/spdx/Spdx22ComponentDetector.cs to understand the existing SPDX detector, then read the CycloneDX specification and NuGet package reference. Done means adding equivalent support for detecting CycloneDX SBOMs; the issue does not name a test file.

Written by the indexing model from the issue text.