[ENHANCEMENT] Investigate OmniBOR (aka gitbom) integration

gitbom is a minimal specification to generate an artifact tree and a unique identifier for an artifact that is metadata agnostic and only depends on the artifact byte contents. If adopted widely and integrated with build tools, it can potentially solve some interesting problems https://gitbom.dev/glossary/sbom/#gitbom-compliments-sbom

Should we consider adding fields in the 1.5 cyclonedx schema to support gitbom ids and documents?

Relevant links - https://gitbom.dev/