add info to SBOM results: which version of composer was used in the process

[jkowalleck]

Is your feature request related to a problem? Please describe.

This is a composer plugin, it heavily utilizes and depends on composer functionality.

Current SBOM result contains the tool that was used to gather all data.
But it does not include any information about the composer that was used to gather the initial vectors.
Therefore, it is not entirely clear, HOW an SBOM was created - in terms of reproducibility.

Describe the solution you'd like

add composer with the following version to bom.metadata.tools

• name: "composer"
• vendor: undefined
• version: the version that was detected, unmodified
• hashes: empty
• external references: empty

Describe alternatives you've considered

none

Additional context

none