[docs] Clarify Option Placement in verify file Command Help

[viveksahu26]

Description:

The help documentation for the verify file command in cyclonedx-cli appears to incorrectly specify the placement of options like --key-file and --signature-file.

Current Help Text:

Usage:
  cyclonedx-cli [options] verify file <file>

This suggests that options such as --key-file and --signature-file should be placed before the verify file subcommand. For example:

cyclonedx-cli --key-file public_key.pem --signature-file sbom.sig verify file SPDXJSONExample-v2.3.spdx.json

However, this does not work. The correct syntax is:

cyclonedx-cli verify file SPDXJSONExample-v2.3.spdx.json --key-file public_key.pem --signature-file sbom.sig

Expected Behavior:

The help text should clarify that the options --key-file and --signature-file must be placed after the verify file subcommand and <file> argument.

[andreas-hilti]

Compare also #382.

[viveksahu26]

Yes, it's duplicate.