Upload SBOM to dependency-track