feat: added aibom extension

[denis-snyk]

Pull Request Submission Checklist

• Follows CONTRIBUTING guidelines
• Includes detailed description of changes
• Contains risk assessment (Low | Medium | High)
• Highlights breaking API changes (if applicable)
• Links to automated tests covering new functionality (Will be added to environment-testing once feature is live)
• Includes manual testing instructions (if necessary)
• Updates relevant GitBook documentation (Given this feature is very experimental and has restricted use, we likely don't want it in the documentation yet)
• Includes product update to be announced in the next stable release notes

What does this PR do?

Registers a new CLI extention cli-extension-ai-bom. This version of the extension adds a single command snyk aibom which creates an AI Bill Of Materials in CycloneDX format and outputs it to the command line.
The codebase for the extension is: https://github.com/snyk/cli-extension-ai-bom . It's currently relatively small & follows the standard structure of a golang CLI extension.

Where should the reviewer start?

The main thing we do to the CLI in this PR is register the extension in cliv2/cmd/cliv2/main.go.

Risk assessment & Feature Flag

This CLI extension adds a new command. It should not impact any other commands. The command requires both a --experimental flag and an org_public_id based Feature Flag to be enabled.

How should this be manually tested?

Build the CLI, make build. Run the CLI against any python project with AI assets. e.g.
snyk aibom cli/test/fixtures/ai-bom/python-chatbot --experimental.

We intend to add e2e tests once the command is in the preview branch. This will likely be part of environment testing (unless you recommend otherwise).

What's the product update that needs to be communicated to CLI users?

Product updates to be included during Snyk Launch 2025

What are the relevant tickets?

https://snyksec.atlassian.net/browse/AIBOM-34