Temurin SBoM: Discuss naming convention of the fields

[sxa]

From some of the discussions in the secure dev call this week, we should look at the naming convention for some of the fields in there
e.g. the metadata/tools section with names like GLIBC etc., and the name of the name/value pairs in the component section (from the strace work). Perhaps the component sections will be updated to include other information including where to get metadata for those dependencies.