[CRAVEX] SCA Integrations: OWASP dep-scan

[tdruez]

• Issue: CRAVEX-integration: Integration with SCA Tools: OWASP-depscan #1733

This PR adds support for importing SBOMs generated with OWASP dep-scan.

Changes:

• Add a unit test to ensure the OWASP dep-scan SBOM support
• Add a GitHub workflow that runs every week to ensure the OWASP dep-scan SBOM support (see below for details)

Workflow

Available at .github/workflows/sca-integration-depscan.yml

Documentation:

# This workflow:
#  1. Generates a CycloneDX SBOM for a container image using OWASP dep-scan.
#  2. Uploads the SBOM as a GitHub artifact for future inspection.
#  3. Loads the SBOM into ScanCode.io for further analysis.
#  4. Runs assertions to verify that the SBOM was properly processed in ScanCode.io.
#
# It runs on demand, and once a week (scheduled).