feat: Generate extended SBOMs

[dervoeti]

Last thing needed for stackabletech/issues#614

Changes:

• Update Syft to latest version
• Fix CycloneDX version to 1.5
• Enable Syft's sbom-cataloger to pick up the build-time generated SBOMs
• Use https://github.com/stackabletech/mergebom to merge the information found in the new SBOMs inside the images with the information found by Syft's other catalogers. More details about this can be found in Nuclino and in the comments of mergebom.