SBOM with CycloneDx struct

[attiasas]

• The pull request is targeting the dev branch.
• The code has been validated to compile successfully by running go vet ./....
• The code has been formatted properly using go fmt ./....
• All static analysis checks passed.
• All tests have passed. If this feature is not already covered by the tests, new tests have been added.
• Updated the Contributing page / ReadMe page / CI Workflow files if needed.
• All changes are detailed at the description. if not already covered at JFrog Documentation, new documentation have been added.

---

Replace old Sbom struct with github.com/CycloneDX/cyclonedx-go and adjust logic
Adding utilities for handling CycloneDX

[hadarshjfrog]

Great job here to a massive change 👏

Added some comments and mostly questions.

One thing that reoccured - please go over what you define as the main flows of the process, and especially the one that we're more tricky while coding and testing it - and add logs - mostly DEBUG - but I can think of a few INFO

[github-actions]

---

🐸 JFrog Frogbot