Fix cgmanifest.json hash format and add type:git entries for NOTICE generation

[beena352]

Summary of the Pull Request

Fix Component Governance registration failures for 4 OSS components (nlohmann::json, GSL, yaml-cpp, boost) by converting their hash format from sha256 to sha1, and add  type: "git"  entries for yaml-cpp, GSL, and nlohmann::json so the notice pipeline can resolve their licenses.

PR Checklist

• Closes: Link to issue #xxx
• Communication: I've discussed this with core contributors already. If work hasn't been agreed, this work might be rejected
• Tests: Added/updated if needed and all pass
• Localization: All end user facing strings can be localized
• Dev docs: Added/updated if needed
• Documentation updated: If checked, please file a pull request on our docs repo and link it here: #xxx

Detailed Description of the Pull Request / Additional comments

The  wsl-github-notice  pipeline was silently rejecting 4  type: "other"  cgmanifest entries during CG registration with:
The provided user input is not valid. Parameter name: 'Hash'.
Root cause: CG's server does not accept sha256:  prefixed hashes for type: "other" registrations, only sha1:  works (as evidenced by the libarchive entry which was already using sha1 and being accepted).
Changes:

1. Converted hash format from sha256:  to sha1:  for boost, yaml-cpp, GSL, and nlohmann::json, fixing the registration rejection.
2. Added type: "git" entries (with repositoryUrl + commitHash) for yaml-cpp, GSL, and nlohmann::json, same dual-registration pattern libarchive and boost already use. This gives notice@0 a coordinate it can resolve directly in ClearlyDefined.

Result: Registrations went from 35 accepted (4 rejected) → 44 accepted (0 rejected). GSL and nlohmann::json now appear in the generated NOTICE.txt. yaml-cpp and boost will appear once their ClearlyDefined harvests complete (~2 weeks, already triggered).

Validation Steps Performed

1. Pushed branch  user/beenachauhan/fix-cgmanifest-hash  and ran  wsl-github-notice  pipeline manually (run #20260707.8, commit  107e2571 ).
2. Confirmed "Submitted 44 registrations" with zero  Parameter name: 'Hash'  warnings.
3. Downloaded NOTICE.txt artifact (83,498 bytes, up from 78,779) and verified:
   •  microsoft/gsl a3534567... - MIT license present
   •  nlohmann/json 55f93686... - MIT license present
4. Confirmed yaml-cpp appears in "Not harvested in ClearlyDefined" (expected - harvest pending, no code fix needed).

[Copilot]

Pull request overview

This PR updates the repository’s Component Governance manifest to unblock CG registration and improve NOTICE/license resolution for several third-party OSS components by using accepted hash formats and adding git coordinates.

Changes:

• Changed type: "other" component hashes for boost, yaml-cpp, GSL, and nlohmann/json from sha256: to sha1: format.
• Added type: "git" registrations (repositoryUrl + commitHash) for yaml-cpp, GSL, and nlohmann/json to support notice/license resolution pipelines.

[Copilot]

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated no new comments.

[OneBlue]

LGTM. One minor question