feat(ISV-5857): Port SBOM merging helper functions #27

Namespace: <a href="https://detailurl.setting.custom-console-url-namespace.is.not.configured" rel="nofollow">the-collective-tenant
PipelineRun: <a href="https://konflux-ui.apps.kflux-prd-rh02.0fk9.p1.openshiftapps.com/ns/the-collective-tenant/pipelinerun/mobster-f7a65-on-pull-request-6dxc8" rel="nofollow">mobster-f7a65-on-pull-request-6dxc8

Success

Konflux kflux-prd-rh02/mobster-f7a65-on-pull-request has successfully validated your commit.

Status	Duration	Name
✅ Succeeded	7 seconds	init
✅ Succeeded	10 seconds	clone-repository
✅ Succeeded	7 seconds	prefetch-dependencies
✅ Succeeded	1 minute	build-images
✅ Succeeded	15 seconds	build-image-index
✅ Succeeded	7 seconds	coverity-availability-check
✅ Succeeded	6 seconds	deprecated-base-image-check
✅ Succeeded	8 seconds	apply-tags
✅ Succeeded	3 minutes	clamav-scan
✅ Succeeded	29 seconds	rpms-signature-scan
✅ Succeeded	16 seconds	push-dockerfile
✅ Succeeded	1 minute	ecosystem-cert-preflight-checks
✅ Succeeded	9 seconds	sast-shell-check
✅ Succeeded	1 minute	clair-scan
✅ Succeeded	9 seconds	sast-unicode-check
✅ Succeeded	7 seconds	sast-snyk-check
✅ Succeeded	8 seconds	show-sbom