use CPE `update` and `edition` fields to derive matching version to reduce FP

[chadlwilson]

The NVD has some CVEs such as https://nvd.nist.gov/vuln/detail/CVE-2021-42550, that use these fields to include additional data that is part of the version, sometimes representing pre-release versions.

Creating this issue to group together FPs which cannot be fixed without support for these CPE fields.

Relates to #7139

[github-actions]

Error parsing package url: .

Error: Error: Invalid purl: "type" is a required component

Please correct the package URL - consider copying the package url from the HTML report.

[github-actions]

Failed to automatically evaluate the false positive. See: https://github.com/dependency-check/DependencyCheck/actions/runs/26520402491