Update SBOM Scope and Deliverables with DE STF

[ruddermann]

After discussions with the OpenJS Board and DE STF on that status of the SBOM initiative and overall SBOM domain, the scope and deliverables for DE STF's grant need to be updated.

Fundamentally, this issue will be addressed in #100, but the specific task for DE STF should be tracked here.