VIEW_PORTFOLIO permissions ability to download the SBOM

### Current Behavior

Hello Currently to enable users to download the SBOM

We have to grant them PORTFOLIO_MANAGEMENT permission, this has a lot of privileges, namely the ability to delete a project, etc... that we do not want to grant to read only viewers. They may need to download the SBoM for report purposes, but that is the only operation they are required.

### Proposed Behavior

Allow VIEW_PORTFOLIO to download the SBOM (enable the SBOM button to be visible).

This will allow us to enforce least privilege access principle.

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this enhancement was already requested