Initial commit of basic SBOM extension

[louislang]

This is the initial implementation of the SBOM extension. It produces a valid, but bare bones SBOM based on the JSON response for a Phylum job.

[CLAassistant]

All committers have signed the CLA.