2.3.3

fix(container-sbom): sbom_filename input. Multi-image consumers
that collocate SBOMs under one package_name can now give each job
a distinct output filename so they don't overwrite each other.
Default behaviour unchanged.