perf: cache dependency refs to skip redundant registration in validate()

[saquibsaifee]

Description

This pull request optimizes the Bom.validate performance.

Changes:

• Added dependency caching to avoid evaluating components and dependencies that have already been validated.
• Removed unused generator usages mapped via map and itertools.chain for gathering dependency references and testing root component dependency trees.
• Flatted logic to iterate over all elements with list additions list.extend rather than dynamically generating generators at runtime.

AI Tool Disclosure

• My contribution does not include any AI-generated content
• My contribution includes AI-generated content, as disclosed below:
  • AI Tools: Gemini Jules
  • LLMs and versions: Gemini 3.1 Pro

Affirmation

• My code follows the CONTRIBUTING.md guidelines

[saquibsaifee]

During the generation of large SBOMs, validation times were high due to generator evaluation.
With this change, the Bom.validate() running time on an SBOM with 2500 nested components and 2500 services executed 10 times drops from 49.4 seconds down to 5.1 seconds. This yields a 10x execution speedup in terms of validation execution alone.

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 7 complexity · 0 duplication

Metric	Results
Complexity	7
Duplication	0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

[read-the-docs-community]

Documentation build overview

📚 CycloneDX Python Library | 🛠️ Build #34583024 | 📁 Comparing c44480c against latest (52cb3c9)

  🔍 Preview build  

2 files changed

± autoapi/cyclonedx/model/vulnerability/index.html
± autoapi/cyclonedx/contrib/vulnerability/cvss/index.html

[saquibsaifee]

@jkowalleck can you take a look at this PR to boost SBOM generation turn around

[saquibsaifee]

Need to look into this again, might not be adding any performance improvement at all