[CRAVEX] SCA Integrations: SBOM tool

[tdruez]

• Issue: CRAVEX-integration: Integration with SCA Tools: sbom-tool #1732

This PR adds support for importing SBOMs generated with SBOM tool.

https://github.com/microsoft/sbom-tool?tab=readme-ov-file#run-the-tool
https://github.com/microsoft/sbom-tool/blob/main/docs/sbom-tool-arguments.md

Notes:

SBOM tool generates SBOM under the SPDX 2.2 format. To ensure full compatibility with SPDX: "Resolve and load dependencies from SPDX SBOMs" was introduced in PR: #1827

Changes:

• Add a unit test to ensure the SBOM tool SBOM support
• Add a GitHub workflow that runs every week to ensure the SBOM tool SBOM support (see below for details)

Workflow

Available at .github/workflows/sca-integration-sbom-tool.yml

Documentation:

# This workflow:
#  1. Generates a CycloneDX SBOM for a container image using SBOM tool.
#  2. Uploads the SBOM as a GitHub artifact for future inspection.
#  3. Loads the SBOM into ScanCode.io for further analysis.
#  4. Runs assertions to verify that the SBOM was properly processed in ScanCode.io.
#
# It runs on demand, and once a week (scheduled).