SBOM from GHA - again

[matthewnitschke-wk]

Re-creation of: https://github.com/Workiva/scip-dart/pull/124, so build issues resolve

[aviary-wf]

Security Insights

No security relevant content was detected by automated scans.

Action Items

• Review PR for security impact; comment "security review required" if needed or unsure

• Verify aviary.yaml coverage of security relevant code

  Questions or Comments? Reach out on Slack: #support-infosec.

[robbecker-wf]

@Workiva/release-management-p 🚢