Add Software Composition Analysis (SCA)

[cak]

Add a chapter on Software Composition Analysis (SCA), including tools like Dependabot. Should cover running one-off analyses, integrating SCA in CI, and managing findings with custom auto-triage rules.

[cak]

Hi everyone,

Apologies for the delay! I'm working on the Software Composition Analysis (SCA) section and polishing it based on best practices. You can find the current working copy here:

🔗 Security-Best-Practices: Software Composition Analysis Draft

I'll continue refining it and implementing any feedback to ensure it aligns well with the overall guide. Let me know if there are any specific aspects you'd like to see covered!

Thanks,
Caleb