Feature: Proctor can validate SBOM against Go binary

[joshrosso]

Proctor is able to be pointed at an SBOM and a go binary. It then is able to validate that the binary does represent the SBOM. If there is a mismatch, it can provide a diff of which dependencies were different than expected.

For example:

proctor check ${SBOM_URL} ${BINARY_PATH}

Along with doing a check, this can act as a diff mechanism that shows the dependency differences between a current binary and an SBOM.