Description of Change

• Update the list of suppressed icu4j CVEs for java due to lack of support for the target sw ecosystem.
• Sorted it so it can be compared easily with the search
• Consolidate into single suppression across multiple java packages for ease of maintenance

Reconciled with the NVD and checked all are C/C++.

Related issues

• relates to earlier icu4j-58.2.jar mis-identified as C/C++ implementation of ICU #851 Duplicate CPE for ICU? #1073 and [FP]: icu4j-61.1 #4414
• noted while investigating [FP]: spdx-java-model-2_X #8051

Have test cases been added to cover the new functionality?

N/A