docs: document the SBOM structure in the database

[ctron]

I updated the documentation. Indeed those IDs did not reflect that actual state of the DB structure. I hope it's better now.