fix: Improve visibility of logging from inside exception handlers

[DaveTryon]

https://github.com/microsoft/dropvalidator/issues/874 calls out some scenarios where error messages were being logged only at Debug verbosity. This PR changes all ILogger.Debug calls in exception handlers to ILogger.Warning to increase the visibility.

[codecov-commenter]

Codecov Report

Attention: Patch coverage is 17.64706% with 14 lines in your changes are missing coverage. Please review.

Project coverage is 59.73%. Comparing base (85cb4ed) to head (d657938).

Files	Patch %	Lines
src/Microsoft.Sbom.Api/Output/MetadataBuilder.cs	0.00%	5 Missing ⚠️
...Converters/ExternalReferenceInfoToPathConverter.cs	0.00%	1 Missing ⚠️
...m.Api/Executors/ComponentToPackageInfoConverter.cs	0.00%	1 Missing ⚠️
.../Microsoft.Sbom.Api/Executors/EnumeratorChannel.cs	0.00%	1 Missing ⚠️
src/Microsoft.Sbom.Api/Executors/FileFilterer.cs	0.00%	1 Missing ⚠️
src/Microsoft.Sbom.Api/Executors/FileInfoWriter.cs	0.00%	1 Missing ⚠️
...crosoft.Sbom.Api/Executors/ManifestFileFilterer.cs	0.00%	1 Missing ⚠️
...osoft.Sbom.Api/Executors/ManifestFolderFilterer.cs	0.00%	1 Missing ⚠️
...rosoft.Sbom.Api/Executors/PackageInfoJsonWriter.cs	0.00%	1 Missing ⚠️
...tors/SPDXSBOMReaderForExternalDocumentReference.cs	50.00%	1 Missing ⚠️

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #540   +/-   ##
=======================================
  Coverage   59.73%   59.73%           
=======================================
  Files         248      248           
  Lines        7572     7572           
  Branches      900      900           
=======================================
  Hits         4523     4523           
  Misses       2637     2637           
  Partials      412      412           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[sfoslund]

Changes themselves LGTM. Have you run this version of the tool against any real drops? I would be curious how many of these warnings are surfaced in a normal run, if any

[DaveTryon]

Changes themselves LGTM. Have you run this version of the tool against any real drops? I would be curious how many of these warnings are surfaced in a normal run, if any

As we discussed offline, local testing was against the sbom-tool repo where the change was made