As the first part of #25, we need to add the underlying schema and data
structures required to be able to query the SBOM end-of-life data, which
we can add as a separate commit to avoid an overly large change.