fix(security): protect shared SBOM Data with per-Data lock

fix(security): protect shared SBOM Data with per-Data lock #20042