csaf-poc/csaf_distribution: repo moved

[tschmidtb51]

For your awareness:

As the tools are not a PoC (even since the first release), the long overdue change was conducted: The repo https://github.com/csaf-poc/csaf_distribution moved to https://github.com/gocsaf/csaf. The old URL can still be used for a couple month before it is sunsetted for security reasons.
Also, the license changed from MIT to Apache 2.0 (on the main branch, there is no new release yet).

Currently, that is mentioned in

trivy/go.mod

Line 45 in 63dd3d6

github.com/csaf-poc/csaf_distribution/v3 v3.0.0

Please change the URL at an appropriate time.

[knqyf263]

Thanks #7805