fix: hardcode xalan group ID (#2368)

According to maven central, the package called "xalan" should just have
the group ID xalan, but currently syft isn't able to find that.

Signed-off-by: Will Murphy <will.murphy@anchore.com>

syft/pkg/cataloger/common/cpe/java_groupid_map.go

@@ -1199,4 +1199,5 @@ var DefaultArtifactIDToGroupID = map[string]string{
 	"spring-webflow":                                           "org.springframework.webflow",
 	"spring-ws":                                                "org.springframework.ws",
 	"spring-xml":                                               "org.springframework.ws",
+	"xalan":                                                    "xalan", // see https://mvnrepository.com/artifact/xalan/xalan/2.7.2
 }