adding SBOM generation per PR

[lsulak]

Release Notes

• Adding SBOM per PR. Addresses all SBOM findings.
• On build.yml there is a new Job that covers this, no need to add it on the bottom of each existing jobs, that is duplication ([SEC:HIGH][FP=11cbb2a7] Ensure pipeline steps produce an SBOM #466 and [SEC:HIGH][FP=dba2c2da] Ensure pipeline steps produce an SBOM #467)
• On Jacoco - this is not needed as it's duplicated, the CI action trigger is also on a per PR basis ([SEC:HIGH][FP=cad917c9] Ensure pipeline steps produce an SBOM #470)

Closes #470
Closes #467
Closes #466