Update Go SBOM CycloneDX version

The go_sbom job currently outputs SBOM in CycloneDX v1.4 format. This should be updated to 1.6 (maybe remove and leave default).

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information