Question: Is there a reason why there is no command line option to sign the generated sbom-file using a given key?

Essentially what the subject says. CycloneDX itself supports this just fine:

```
cyclonedx sign bom \
"${bom_file_path}" \
--key-file "${sbom_signing_key_file_path}"
```

Appreciate any insights. Keep up the good job.

No files, tests, or entry points are named in the issue. Start by locating the existing command-line SBOM generation flow and compare its options with the shown CycloneDX sign command. Confirm the expected key-file and output behavior, then define completion around a documented and tested signing option.

Written by the indexing model from the issue text.