testing/bomctl: new aport

Adding bomctl, a tool for working with Software Bill of Materials that is format agnostic.

This is a project under the Security Tooling Working Group of the Open Source Security Foundation.

Signed-off-by: Ian Dunbar-Hall ian.dunbar-hall@lmco.com