fix(deps): bump org.cyclonedx.bom from 1.6.1 to 2.0.0

Bumps org.cyclonedx.bom from 1.6.1 to 2.0.0.

---
updated-dependencies:
- dependency-name: org.cyclonedx.bom
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

build.gradle

@@ -13,7 +13,7 @@ plugins {
   id 'com.diffplug.spotless' version '7.0.2'
   id 'io.codearte.nexus-staging' version '0.30.0'
   id 'project-report'
-  id 'org.cyclonedx.bom' version '1.6.1' // no bom.json created in later versions
+  id 'org.cyclonedx.bom' version '2.0.0' // no bom.json created in later versions
 }
 
 allprojects {