fix(sbom): save digests for package/application when scanning SBOM files

[DmitriyLewen]

Description

Reports in SBOM formats contain package/application digests.
But when we scan these reports, we miss the digests.
We need to include digests like in json format.

See #5424 for details.

Related issues

• Close bug(sbom): packages layers are not saved in sbom mode. #5430

Checklist

• I've read the guidelines for contributing to this repository.
• I've followed the conventions in the PR title.
• I've added tests that prove my fix is effective or that my feature works.
• I've updated the documentation with the relevant information (if needed).
• I've added usage information (if the PR introduces new options)
• I've included a "before" and "after" example to the description (if the PR is a user interface change).