GROOVY-10993: Add CycloneDX SBOM files

[paulk-asert]

This creates and publishes the cyclonedx sbom files but there are essentially empty ones for groovy-all, groovy-bom and groovy-binary. I don't know if that is a bug or feature. I.e. I don't know whether security scanning tools follow the transitive dependencies and merged to sbom data. If not we might have to do some aggregation like we do for groovy-all docs.

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 68.6274%. Comparing base (6cd477b) to head (13cf8ea).
Report is 97 commits behind head on master.

Additional details and impacted files

@@                Coverage Diff                 @@
##               master      #2092        +/-   ##
==================================================
+ Coverage     68.5957%   68.6274%   +0.0318%     
- Complexity      29233      29327        +94     
==================================================
  Files            1426       1426                
  Lines          113494     113628       +134     
  Branches        19548      19601        +53     
==================================================
+ Hits            77852      77980       +128     
  Misses          29088      29088                
- Partials         6554       6560         +6     

see 36 files with indirect coverage changes

[daniellansun]

Merged. Thanks.