feat: `component.tags` based on composer keywords

[jkowalleck]

background

CycloneDX supports "tags" - https://cyclonedx.org/docs/1.6/json/#components_items_tags
These "tags" are the equivalent of composer's "keywords" - https://getcomposer.org/doc/04-schema.md#keywords

request

poppulate components[].tags based on composer manifest's keywords.