fix(sbom,scan): find openssl CVEs for FIPS provider

[luhring]

Ensures we find openssl CVEs for the FIPS provider by explicitly setting the package CPE.

Before

$ wolfictl scan -D ./openssl-provider-fips-3.0.9-r1.apk
🔎 Scanning "./openssl-provider-fips-3.0.9-r1.apk"
✅ No vulnerabilities found

After

$ wolfictl scan -D ./openssl-provider-fips-3.0.9-r1.apk
🔎 Scanning "./openssl-provider-fips-3.0.9-r1.apk"
└── 📄 /.PKGINFO
        📦 openssl-provider-fips 3.0.9-r1 (apk)
            Medium CVE-2023-2975
            Medium CVE-2023-3817
            High CVE-2023-4807
            High CVE-2023-5363
            Medium CVE-2023-5678
            Medium CVE-2023-6129
            Unknown CVE-2023-6237
            Medium CVE-2024-0727
            Unknown CVE-2024-2511
            Medium CVE-2024-4603
            Critical CVE-2024-5535
            High CVE-2024-6119

[xnox]

$ wolfictl scan -D ./openssl-provider-fips-3.0.9-r1.apk --distro 'chainguard'
🔎 Scanning "./openssl-provider-fips-3.0.9-r1.apk"
└── 📄 /.PKGINFO
        📦 openssl-provider-fips 3.0.9-r1 (apk)
            Unknown CVE-2023-6237
            Medium CVE-2024-4603

Is correct as of today, thanks!