Add VEX SBOM automation

[tjorbo]

Story

As the person responsible for security, I would like a VEX-SBOM to be generated automatically in order to be able to automatically assess security risks and trigger alerts.

Technical details

• compare it with similar approaches such as CSAD
• https://www.google.com/url?q=https://gist.github.com/dfucci/055db60081cf188791ea593a149e1073&source=gmail-imap&ust=1733733067000000&usg=AOvVaw1uLcL9S6a-1j1ysrOAN7Is

Acceptance criteria

• The VEX-SBOM is generated daily on the basis of Renovate/Dependabot
• No dev dependencies are taken into account in order to avoid the number of commits
• Alerting for security risks has been developed and introduced