rework logging/output

[jkowalleck]

current console output is done via writig to stdout in a custom console.
maybe better use a dedicated debug/log libary? like https://www.npmjs.com/package/debug

motivation:

• have different log levels: debug,info,warn,critical,error
• have an CLI switch to set the desired output level - like --verbose 3 or -vvv

acc crit:

• all log/debug must go to STDERR - so stdout is free returned SBOM data

[jkowalleck]

idea:

• use a logger, instead of printing directly to STDERR.
• logger would have a configurable level, default to 'warning'.
• logger would print to STDERR.
• logger level can be increased via CLI switch --verbose ... -v|-vv|-vvv