Feature/schema validator cyclonedx imp

[Hiepler]

Description

Adds schema validation, CycloneDX SBOM import, and introduces the AI BOM v1.1 schema revision with proper format
governance.

Core changes:

• validate command — check EuConform JSON documents against published schemas
• import command — map CycloneDX JSON SBOMs into the EuConform AI BOM layer
• euconform.aibom.v1.1 schema — new revision with optional import provenance metadata, keeping v1 clean for
  native scan output
• PURL parser with graceful handling of malformed percent-encoding
• Remove validate/importCycloneDx from core barrel export to fix web build (available via
  @euconform/core/validation and @euconform/core/sbom subpath exports)

Documentation:

• Repositioned project as "Open-Source Evidence Toolkit For AI Compliance"
• Bias evaluation elevated as primary differentiator across all READMEs
• Added CLI command overview tables, workflow sections, and interoperability documentation
• All v1/v1.1 references consistent with actual code output

Type of Change

• 🐛 Bug fix (non-breaking change which fixes an issue)
• ✨ New feature (non-breaking change which adds functionality)
• 📚 Documentation update
• 🧪 Test update

Checklist

Code Quality

• My code follows the project's coding standards (Biome)
• I have performed a self-review of my code
• My changes generate no new warnings

Testing

• I have added tests that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes

Documentation

• I have updated the documentation accordingly
• I have updated the README if needed

Additional Notes

• Changeset included — merging will bump @euconform/core to 1.5.0 and @euconform/cli to 1.2.0
• Web build fixed — removing Node.js-only exports from the core barrel resolves the node:fs/node:path
  bundler error
• Schema governance — metadata field moved from v1 to v1.1 to comply with the spec's own versioning policy
  (additionalProperties: false means shape changes require a new revision)
• 244/244 tests pass, both web and CLI builds succeed, docs build clean

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

❌ Patch coverage is 62.12121% with 250 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
packages/cli/src/commands/import.ts	0.00%	112 Missing and 1 partial ⚠️
packages/cli/src/commands/validate.ts	0.00%	98 Missing and 1 partial ⚠️
packages/core/src/validation/schema-validator.ts	83.69%	15 Missing ⚠️
packages/core/src/evidence/validate.ts	0.00%	11 Missing ⚠️
packages/cli/src/index.ts	0.00%	4 Missing ⚠️
packages/core/src/sbom/cyclonedx-import.ts	97.01%	4 Missing ⚠️
packages/core/src/sbom/component-mapper.ts	96.49%	2 Missing ⚠️
packages/core/src/sbom/index.ts	0.00%	0 Missing and 1 partial ⚠️
packages/core/src/validation/index.ts	0.00%	0 Missing and 1 partial ⚠️

📢 Thoughts on this report? Let us know!