feat(RELEASE-1214): add support for spdx sbom format

[mmalina]

Build team is moving from cyclonedx to spdx sbom format. To support both formats until the transition is over:

• The original upload_rpm_data was copied as upload_rpm_data_cyclonedx to preserve the original behavior for now
• upload_rpm_data was modified to work with spdx format

[johnbieren]

So for the review, upload_rpm_data_cyclonedx.py and test_upload_rpm_data_cyclonedx.py are just copies and do not need review?
So then as part of this ticket, the tekton task will be switched to use upload_rpm_data_cyclonedx and once the transition is over the task will be modified to use upload_rpm_data and then the *_cyclonedx` files can be removed here? Do I have that right?

[mmalina]

So for the review, upload_rpm_data_cyclonedx.py and test_upload_rpm_data_cyclonedx.py are just copies and do not need review?

Correct.

So then as part of this ticket, the tekton task will be switched to use upload_rpm_data_cyclonedx and once the transition is over the task will be modified to use upload_rpm_data and then the *_cyclonedx` files can be removed here? Do I have that right?

Yeah, for now we will run one of the scripts depending on the sbom type: https://github.com/konflux-ci/release-service-catalog/pull/685/files

And eventually we will remove the upload_rpm_data_cyclonedx.py script and the logic in the task and support just spdx.

[johnbieren]

lgtm otherwise