Fix version remediation in CDX mapping

[eranturgeman]

• The pull request is targeting the dev branch.
• The code has been validated to compile successfully by running go vet ./....
• The code has been formatted properly using go fmt ./....
• All static analysis checks passed.
• All tests have passed. If this feature is not already covered by the tests, new tests have been added.
• Updated the Contributing page / ReadMe page / CI Workflow files if needed.
• All changes are detailed at the description. if not already covered at JFrog Documentation, new documentation have been added.

---

There are 2 normalization corrections here:

1. normalizing the returned version so we ensure it has no 'v' prefix - will be removed in future update after the api will normalize its responses
2. the switch from strings.ReplaceAll(compName, "/", ":") to normalizeCdxComponentName(compName, compType):
   This replacement correct an incorrect behaviour that was applied to all package managers but relevant ONLY to maven. In go, for example we can have '/' in packages names, therefore switching ti ':' produce incorrect names that fail the fixes in Frogbot (cannot be found in descriptors)

[attiasas]

LGTM, preferable that either the BOM gen will use v prefix in version or remediation won't return v prefix...

[github-actions]

---

🐸 JFrog Frogbot