Update serialNumber format and supply metadata.component.version

[yurxyl]

The strict schema validation was introduced in Dependency-Track API v4.11.0 (https://docs.dependencytrack.org/changelog):

BOM Validation. Historically, Dependency-Track did not validate uploaded BOMs and VEXs against the CycloneDX schema. While this allowed BOMs to be processed that did not strictly adhere to the schema, it could also lead to confusion when uploaded files were accepted, but then failed to be ingested during asynchronous processing. Starting with this release, uploaded files will be rejected if they fail schema validation.

This PR adds cosmetics changes to comply with the BOM schema.