Pre-1.0 accepted review fixes

[devashridatta-dotcom]

This draft PR stages accepted review comments for the pre-1.0 release without changing the current RC1/main review baseline until the batch is approved.

For reviewers who want to read the whole proposed document at once:

• Full proposed checklist: CRA_Checklist_Requirement_pre_v1_review.md
• Release-target checklist on this branch: CRA_Checklist_Requirement_latest.md
• Review guide: PRE_V1_REVIEW.md

Included in this review batch:

• Refs 2.2.5 — Require documented appointment process for role assignments to make annual review verifiable #29 - role appointment wording
• Refs 3.1.3 — Replace “CI/CD pipeline” with “software delivery pipeline” to cover multi-stage / distributed SBOM workflows #30 - software delivery pipeline wording
• Refs 3.1.4 — “must comprehensively include” exceeds CRA wording with “at the very least top-level dependencies” #31 - SBOM depth wording
• Refs Correct CRA references following the introduction of section 2.6 #32 - CRA citation and Annex B traceability corrections
• Refs 3.1.6: add SWHID (ISO/IEC 18670) to the unique component identifier examples #34 - SWHID / ISO/IEC 18670 component identifier example
• Refs Definitions for Adopters /Partners / Recognized users #24 - Annex D basis/status definitions, based on the 28 Aug public comment from GitHub user avp9-nexus in issue Definitions for Adopters /Partners / Recognized users #24
• Refs Update document attribution for official release #23 - official-release attribution cleanup

RC1/main remains unchanged while review is ongoing. This PR is for visibility and final approval before merging approved changes into Version 1.0.

Items #25 and #26 should remain open until the website/public-media alignment pass is completed.