Generate SBOM information for Airlfow Reference Images

The SBOM information for the Airflow Reference Images should contain more information than just Python and Javascript - it should also include all the system dependencies that were used in the image. The CycloneDX tool that we are using should be able to produce such an information. and we shoudl even be able to embed the links to such published SBOMs with a (standard?) OCI label (and even retroactively update all the published images).

Review the Airflow Reference Images build and publishing flow alongside the current CycloneDX output. The work is complete when SBOMs include system dependencies, published images expose links through an appropriate OCI label, and the requested existing images are addressed where feasible.

Written by the indexing model from the issue text.