Add automated SPDX SBOM generation to releases (#147)

Signed-off-by: Glenn Jocher <glenn.jocher@ultralytics.com>