sbom: add trivy and upload to deps

add container scanning with trivy to create an SBOM and upload to deps.sub.uni-goettingen.de

check for alternatives for scanning ant project and java (existdb; w/o the need to recompile)

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information