[TRACK] CycloneDX SBOM in `composer`

[jkowalleck]

🔎 track the effort of integrating CycloneDX SBOM in composer

• initial feature request:
  1. Generate CycloneDX BOM composer/composer#8251
  2. Native SBOM Export support composer/composer#11693
• possible implementation: TBD
• released via: TBD