Disambiguate SPDXIDs when merging source and externals SBOMs#214

hugovk merged 3 commits intopython:masterpython/release-tools:masterfrom

sethmlarson:spdx-id-collisionsethmlarson/release-tools:spdx-id-collisionCopy head branch name to clipboard