Reduce supply chain risk with SBOM-based dependency scanning

Introduces SBOM-based dependency scanning as a generally available feature, moving beyond traditional CVE matching. This new analyzer catalogs dependencies in CycloneDX format, traces transitive dependencies, identifies reachable vulnerabilities, and supports continuous scanning. It also introduces security configuration profiles and scan execution policies for centralized management and enforcement of dependency scanning across projects.