[FEATURE] support cyclonedx-bom's -pb flag

[vetsin]

• What are you trying to do?
  Use PURLs instead of UUID's in cyclonedx output

• What feature or behavior is this required for?
  See above

• How could we solve this issue? (Not knowing is okay!)
  cyclonedx-bom 3.5.0 supports the -pb, --purl-bom-ref flag -- jake should too

• Anything else?

cc @bhamail / @DarthHater

[madpah]

This is a candidate to include in v4.0.0 of jake.