chore: uploads sbom as artifact

[dyro]

• Uploads a software bill of materials for c2patool for each of our supported OSs during a release
• Adds Instant to our deny.toml ignore setting. This can be removed when Replace instant crate with web_time c2pa-rs#663 is done and released.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 41.79%. Comparing base (ebfe851) to head (32aab9f).
Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #293   +/-   ##
=======================================
  Coverage   41.79%   41.79%           
=======================================
  Files           4        4           
  Lines         756      756           
=======================================
  Hits          316      316           
  Misses        440      440           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

---

🚨 Try these New Features:

• Flaky Tests Detection - Detect and resolve failed and flaky tests