refactor(sbom): use multiline json for spdx-json format

[DmitriyLewen]

Description

golang-tools uses 1 line json format.
I created #213 to add option to use multiline json.
Until these changes are released, we need to use our function for this.

Before:

➜ trivy -q image -f spdx-json alpine 
{"spdxVersion":"SPDX-2.3","dataLicense":"CC0-1.0","SPDXID":"SPDXRef-DOCUMENT","name":"alpine","documentNamespace":"http://aquasecurity.github.io/trivy/container_image/alpine-22e7aac3-d0ec-4836-bd56-015f1bc757e4","creationInfo":{"licenseListVersion" ...

After:

➜ ./trivy -q image -f spdx-json alpine
{
  "spdxVersion": "SPDX-2.3",
  "dataLicense": "CC0-1.0",
  "SPDXID": "SPDXRef-DOCUMENT",
  "name": "alpine",
  "documentNamespace": "http://aquasecurity.github.io/trivy/container_image/alpine-b5575ff7-bb7f-4b9a-9e68-c2f057bbb6f2",
  "creationInfo": {
    "licenseListVersion": "",
    "creators": [
      "Organization: aquasecurity",
      "Tool: trivy-0.36.2-73-g31b19264"
    ],
    "created": "2023-05-16T04:07:09Z"
  },
...

Checklist

• I've read the guidelines for contributing to this repository.
• I've followed the conventions in the PR title.
• I've added tests that prove my fix is effective or that my feature works.
• I've updated the documentation with the relevant information (if needed).
• I've added usage information (if the PR introduces new options)
• I've included a "before" and "after" example to the description (if the PR is a user interface change).