Convert command should consider NTIA requirements

[wagoodman]

#632 already is tracking adding support for minimum NTIA requirements for SBOM generation, however, the convert command is not explicitly called out (but is referenced in #2197). Do we want to support changing/dropping items to make converted documents compliant? As currently (softly) proposed in #632 (comment) we'd like to make this behavior opt-in. This issue exists to track how that work/configuration affects the convert behavior.