Investigate using tools to generate serialization / deserialization implementations

[amy-keibler]

Since we are splitting the internal data-model from the serialization / deserialization code in #77, we should consider auto-generating the implementations based on the schema definitions in the CycloneDX/specification repository.

Potential Options For Consideration

• For XML, there isn't a clear option that looks feature-complete enough for consideration yet, but lumeohq/xsd-parser-rs is the most complete option found during initial research
• schemafy for JSON Schema
• protobuf for Protobuf

Acceptance Criteria

• Deserialization validates the schema version, but is otherwise accepting of non-conformant data (following the Robustness Principle of gracefully handling invalid data, but only outputting valid data.)
• The process for generating new schema implementation versions of the code should be automated and documented