Add sbom module: Spring Boot 4.2.0-RC1 tools jar-mode sbom command, CycloneDX in the jar, Actuator endpoint, licence check and OSV scan

Co-Authored-By: Claude Sonnet 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01Cfo2K4u4rF18QsPXPFnytf

sbom/output/02-no-sbom.txt

@@ -0,0 +1,7 @@
+$ unzip -p sbom-without.jar META-INF/MANIFEST.MF | grep -i sbom
+Implementation-Title: sbom
+Start-Class: com.ankurm.sbom.SbomApplication
+$ java -Djarmode=tools -jar sbom-without.jar sbom
+Error: No SBOM found in the jar; the manifest has no 'Sbom-Location' attribute
+
+exit code: 1