Add sbom module: Spring Boot 4.2.0-RC1 tools jar-mode sbom command, CycloneDX in the jar, Actuator endpoint, licence check and OSV scan

Co-Authored-By: Claude Sonnet 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01Cfo2K4u4rF18QsPXPFnytf

sbom/output/03-sbom-command.txt

@@ -0,0 +1,14 @@
+$ unzip -p sbom-1.0.0.jar META-INF/MANIFEST.MF | grep -i sbom
+Implementation-Title: sbom
+Start-Class: com.ankurm.sbom.SbomApplication
+Sbom-Location: META-INF/sbom/application.cdx.json
+Sbom-Format: CycloneDX
+exit code of 'sbom': 0
+$ java -Djarmode=tools -jar sbom-1.0.0.jar sbom   (first 120 characters)
+{
+  "bomFormat" : "CycloneDX",
+  "specVersion" : "1.6",
+  "serialNumber" : "urn:uuid:268f551b-ceaa-3a72-8f92-245b35596fa
+--destination exit code: 0
+bytes: command 127460, --destination 127460, unzip 127460
+SHA-256 of the three files: 1 distinct value(s)