feat: shared workflow for sbom export from socket.dev API

[ezebunandu]

Adds a shared workflow that can be used to export the SPDX SBOM for a repo enrolled in the socket.dev GitHub app based on the most recent scan.

[guicaulada]

I left a few comments, they are mostly nits, there's no blocker, they are only recommendations. 🙂

The only blocking thing is that this should be added to our release-please-config.json similar to this diff.

[guicaulada]

Awesome! I caught a few other things on a second look that you might want to change.

If you could, please try to call this action a separate repository on a test workflow with the example of your README so we can have a test run.

[ezebunandu]

Awesome! I caught a few other things on a second look that you might want to change.

If you could, please try to call this action a separate repository on a test workflow with the example of your README so we can have a test run.

I wouldn't be able to call from this repo until it's merged or is that possible?