SBOM generation (matrix)

[printminion-co]

Summary

re-architected the SBOM generation process

Improvements:

• Parallel Execution: The new workflow uses a GitHub Actions matrix to generate SBOMs for all components in parallel,
• Centralized Configuration: Component definitions are now managed in a single setup-matrix job, making it easier to add, remove, or modify components without duplicating workflow steps.
• Enhanced Readability: By eliminating repetitive steps, the new workflow is more concise and easier to understand.
• Dynamic Versioning: A new get-version job automatically extracts the project version from version.php and the commit SHA, ensuring consistent and accurate versioning for all SBOMs.
• Simplified SBOM Merging: For components with both PHP and NPM dependencies, a combined SBOM is generated directly within the generate-sbom job, removing the need for a separate merge-sboms job.
• Improved Upload Process: The upload-sboms job is now more robust, with clearer logging and a more dynamic approach to handling different types of SBOM files (combined, composer-only, or npm-only).

Checklist

• Code is properly formatted
• Sign-off message is added to all commits
• Tests (unit, integration, api and/or acceptance) are included
• Screenshots before/after for front-end changes
• Documentation (manuals or wiki) has been updated or is not required
• Backports requested where applicable (ex: critical bugfixes)