[DOCS] Document your CycloneDX properties

[jkowalleck]

What would you like to be added:

I would love to see a documentation of the CycloneDX property taxonomy used by syft.
Maybe I just missed it? At least it was not linked in the official registry https://github.com/CycloneDX/cyclonedx-property-taxonomy/blob/3edec8ccbb8ca63dc9949a695d119cf9f3d51446/README.md?plain=1#L116

I guess, the documentation could be done in a regularly updated file in this repo, or even in this repo's wiki.

Why is this needed:

You have a CycloneDX property top-level namespace syft registered. I did not find any documentation for it.
You are using own CycloneDX properties - see

syft/syft/format/cyclonedxjson/test-fixtures/identify/1.6.json

Lines 31 to 55 in 1af70d7

	"properties": [
	{
	"name": "syft:package:foundBy",
	"value": "go-module-file-cataloger"
	},
	{
	"name": "syft:package:language",
	"value": "go"
	},
	{
	"name": "syft:package:metadataType",
	"value": "GolangModMetadata"
	},
	{
	"name": "syft:package:type",
	"value": "go-module"
	},
	{
	"name": "syft:cpe23",
	"value": "cpe:2.3:a:wagoodman:go_partybus:v0.0.0-20230516145632-8ccac152c651:*:*:*:*:*:*:*"
	},
	{
	"name": "syft:location:0:path",
	"value": "/go.mod"
	}

To me, it is unclear when these properties are used, what they mean, and which ones exist in the first place.
It would help if I had a documentation for the syft: CycloneDX property taxonomy.

Additional context:

CycloneDX property taxonomy registry: https://github.com/CycloneDX/cyclonedx-property-taxonomy/blob/main/README.md

[spiffcs]

Thanks for the issue @jkowalleck! I've added this to our needs-discussion label so that this Thursday we can pick this up on our live stream and talk as a team at how to improve our documentation surrounding the outputs that we generate with syft.