Remove erroneous (thanks chatgpt) "attach" config property for CycloneDX plugin

Author: cowtowncoder

base/pom.xml

@@ -209,7 +209,6 @@ NOTE: NOT to be used by components outside of Jackson: application code should o
           <groupId>org.cyclonedx</groupId>
           <artifactId>cyclonedx-maven-plugin</artifactId>
           <configuration>
-            <attach>true</attach>
             <classifier>sbom-cyclonedx</classifier>
             <skipNotDeployed>true</skipNotDeployed>
           </configuration>

release-notes/VERSION

@@ -11,6 +11,7 @@ NOTE: Entries for 2.x found from `release-notes/VERSION-2.x`
 === Releases (note: only includes patches with actual changes)
 ------------------------------------------------------------------------
 
+3.0.0-rc9 (not yet released)
 3.0.0-rc8 (13-Aug-2025)
 3.0.0-rc7 (08-Aug-2025)
 3.0.0-rc6 (18-Jul-2025)