Add support for creating SBOMs from binaries

[nscuro]

Go embeds module version information in the binaries it builds. go version can be used to retrieve that information:

usage: go version [-m] [-v] [file ...]

[...]

The -m flag causes go version to print each executable's embedded
module version information, when available. In the output, the module
information consists of multiple lines following the version line, each
indented by a leading tab character.

[...]

See https://golang.org/cmd/go/#hdr-Print_Go_version

We can use this to build a SBOM.