Annotate all qt_attribution.json files with CPE and PURL values

All our 3rd party sources have (or should have) an accompanying qt_attribution.json file.

To more easily track our 3rd party supply chain, we should add relevant CPE and PURL values to the qt_attribution.json files in all our repositories.

What CPE and PURL means can be found at https://wiki.qt.io/SBOM#CPE_and_PURL_values_in_qt_attribution.json_files

qtbase is handled via https://codereview.qt-project.org/c/qt/qtbase/+/578553

We need to the same for the following repos:
qt3d
qt5compat
qtapplicationmanager
qtconnectivity
qtdeclarative
qtgrpc
qtimageformats
qtinterfaceframework
qtmultimedia
qtopcua
qtpositioning
qtquick3d
qtsensors
qtshadertools
qtsvg
qttools
qtvehicleservices
qtvirtualkeyboard
qtwayland