generate and upload sbom on release