feat(ISV-6032): allow SBOM uploads to be verifiable in Konflux E2E

[jedinym]

The release pipelines contain a task update-cr-status which merges all JSON files in the directory specified by collect-data.results.resultsDirPath. This merged JSON is then attached to the Release custom resource in the status.artifacts field.

In the Tekton tasks for product and component-level augmentation, we create a new data structure SBOMArtifact which contains all URLs of product or component level SBOMs uploaded to Atlas.

The Tekton tasks get a new param, resultsDirPath which is used to store the serialized artifact JSONs into.

Once the artifacts are attached, we deserialize them in the e2e-tests code and verify that all the URLs have the correct form. This way we can track the number of SBOMs uploaded and their URLs in the E2E tests, verifying that all expected SBOMs were uploaded.

In the future, we could even show these URLs in the Konflux UI, as that uses the same field for other release artifacts.

---

The git revision in the catalog PR is for the head of this branch for testing, after this PR is merged, I will update them back to the master branch.

The Tekton task image references in this PR are my personal repo for testing, after this PR is merged and the new image is built, I will update them accordingly.

---

release-service-catalog PR
e2e-tests PR

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.40%. Comparing base (a4249c7) to head (fd78736).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #120   +/-   ##
=======================================
  Coverage   98.40%   98.40%           
=======================================
  Files          34       34           
  Lines        2125     2137   +12     
=======================================
+ Hits         2091     2103   +12     
  Misses         34       34           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.