Upload API for snapshot SBOMs

[raboof]

It would probably be too heavy to include snapshot SBOMs to the repository, but it might be nice to have an API endpoint where projects (with an API key) could upload snapshot SBOMs so they can be browsed in the tools at https://sbom.security.apache.org/