feat: use go image for sbom job

Presentation

Closes #42 (closed)

Checklist

• General:
  • use rules instead of only/except
  • optimized cache configuration (wherever applicable)
• Publicly usable:
  • untagged runners
  • no proxy configuration but support http_proxy/https_proxy/no_proxy
  • no custom CA certificate(s) but supports $CUSTOM_CA_CERTS or $DEFAULT_CA_CERTS to declare custom CA certificate(s)
  • internet hostnames/urls only
• Used Docker images:
  • public images
  • official images (when possible)
  • latest tag (when possible)
• Documented:
  • README.md documents the new feature
  • kicker.json describes the new feature
• Tested & examplified:
  • Failing: https://gitlab.com/to-be-continuous/samples/golang-on-cloudfoundry/-/jobs/9864616283
  • Fixed: https://gitlab.com/to-be-continuous/samples/golang-on-cloudfoundry/-/jobs/9865307536