Add support for redaction

[stevespringett]

It is desirable to specify that a component, service, assembly, or dependency has been redacted. This is a use case currently being discussed at CISA.

[jkowalleck]

original work was done in https://github.com/CycloneDX/specification/pull/410/files