[RFC] Assimp shall provide a SBOM for each release

**Is your feature request related to a problem? Please describe.**
The Asset-Importer-Lib is using a bundle of external libraries. If there are any kind of vulnerabilities in these we will not regcognize these.

**Describe the solution you'd like**
We shall generate an SBOM (Software Bill of Materials) to provide the versions for all used external software.

**Describe alternatives you've considered**
N/A

**Additional context**
My recommendation would be to offer the SBOS in CycloneX format.

Start by reviewing Assimp's release process and how its external libraries and versions are tracked. Define the release integration needed to generate a CycloneDX-format SBOM for every release, and verify that it lists all bundled external software with versions.

Written by the indexing model from the issue text.