Add schema validation as a scoring criteria.

[riteshnoronha]

Sbomqs is currently not validating the sbom against the official schema for cyclonedx or spdx. This validation should be added to give a better picture of the sbom.

reference: https://github.com/DependencyTrack/dependency-track/issues/3759