Support custom named cyclonedx maven bom output

[benmss]

Some artifacts use a custom name for the SBOM output of cyclonedx-maven via the property outputName. This is either specified in the artifact's pom.xml or is inherited from a parent.
E.g. apache/commons-io with parent of commons-parent

<configuration>
<outputName>${project.artifactId}-${project.version}-bom</outputName>
</configuration>

Thereby creating the file: commons-lang3-<version>-bom.json instead of the default bom.json as Macaron expects.

Supplying the property with the default value in Macaron does not appear to override the inherited value.
An alternative solution is to accept all json files in the expected directory, and rely upon current validation to filter out any bad files.

Artifacts with custom directories in their cyclonedx configuration are not considered in this issue, due to the considerable amount of extra complexity that would add.