fix(security): protect shared SBOM Data with per-Data lock - #54913

• All applicable files are owned properly
  _{Digest: b8bb5c8}

• Security checks passed.
  _{Digest: c574894}

• All required reviewers must approve this pull request before it can be merged. Learn more in our FAQ.

• Needs approval from Team: agent-security

  _{Questions about this check? Reach out in #dx-source-code-management on Slack.
  Digest: ea94ad5}

if this seems incorrect, you can retrigger the evaluation of the MergeGate by clicking on this link