Add modelCard to Service definition

[mrutkows]

More and more "AI" services are being offered as endpoints (generation, summarization, analysis, etc.); it would a valid consideration to be able to declare which AI models were being used behind such services. That is, these are not necessarily packaged or offered as top-level "components" per-se.

[mrutkows]

Again, we should re-visit what makes a component definition and service definition unique (e.g., software services are accessed over a network) as both will have similar information (shared) from a BOM-perspective (i.e., read common base type).

[stevespringett]

Agreed. You should be able to accomplish this two different ways today.

1. An external reference on the service that specifies the SBOM that makes up that service
2. An external reference on the service that specifies the model card, which can appear in the same BOM or in an external BOM.