Separate the execution vendor type sbom from image_scan

[stonezdj]

Add vendor type SBOM for execution
fixes #20495

Thank you for contributing to Harbor!

Comprehensive Summary of your change

Issue being fixed

Fixes #(issue)

Please indicate you've done the following:

• Well Written Title and Summary of the PR
• Label the PR as needed. "release-note/ignore-for-release, release-note/new-feature, release-note/update, release-note/enhancement, release-note/community, release-note/breaking-change, release-note/docs, release-note/infra, release-note/deprecation"
• Accepted the DCO. Commits without the DCO will delay acceptance.
• Made sure tests are passing and test coverage is added if needed.
• Considered the docs impact and opened a new docs issue or PR with docs changes if needed in website repository.

[codecov]

Codecov Report

Attention: Patch coverage is 69.23077% with 4 lines in your changes are missing coverage. Please review.

Project coverage is 66.25%. Comparing base (b7b8847) to head (600110a).
Report is 200 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #20504      +/-   ##
==========================================
- Coverage   67.56%   66.25%   -1.32%     
==========================================
  Files         991     1045      +54     
  Lines      109181   113486    +4305     
  Branches     2719     2842     +123     
==========================================
+ Hits        73768    75190    +1422     
- Misses      31449    34191    +2742     
- Partials     3964     4105     +141     

Flag	Coverage Δ
unittests	66.25% <69.23%> (-1.32%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Files	Coverage Δ
src/controller/scan/base_controller.go	56.82% <100.00%> (-2.73%)	⬇️
src/jobservice/job/known_jobs.go	0.00% <ø> (ø)
src/pkg/scan/handler.go	100.00% <ø> (ø)
src/pkg/scan/sbom/sbom.go	48.51% <0.00%> (ø)
src/pkg/scan/vulnerability/vul.go	56.68% <0.00%> (ø)

... and 568 files with indirect coverage changes

[wy65701436]

lgtm