feat: SBOM generation complete, GET /sbom supports CycloneDX and SPDX-JSON formats

feat: external repo scanning working, 4 targets scanned with real findings documented

feat: Pydantic schema validation on all scanner ingestion, 14 Bandit + 3 Trivy findings validated

feat: complete RAG-augmented LLM pipeline, all findings explained including real CVEs

Added LLM Explanations

Fix graph arrows, improve path normalization and Trivy loading

Initial required files created