Provide SBOM with each release

[arnehude]

hi,

For software security and to gain a better understanding of your own software footprint, OWASP CycloneDX offers a good format for an SBOM. It can generate the corresponding file during the build process, enabling easy integration into vulnerability analysis systems.

Since—at least in Germany—new legal requirements call for a more in-depth examination of dependencies, this is certainly a good way for your project to position itself for the future.

Untested commands for creating the needed such file (cyclonedx cargo addon needed):
cargo cyclonedx --format json -o sbom.json