[IM] Review ToolInformationType for use of CPE

[athiasjerome]

Review the CybOX and STIX ToolInformationType to allow Reference/Usage (by default) of CPE(s)

Currently QNames:
@idoptional QName

The id field specifies a unique ID for this Tool.
@idrefoptional QName

The idref field specifies reference to a unique ID for this Tool.

When idref is specified, the id attribute must not be specified, and any instance of this type should not hold content unless an extension of the type allows it.