Have SBOM errors/alerts/debug bubble up to scan result

[g-marconet]

With this change, SBOM errors/alerts/debugs will bubble up to the scan result.

Description

• SBOM errors/alerts/debugs were going unreported as SBOM results are delivered via S3 rather than through the database like other plugin results. This PR allows SBOM errors/alerts/debugs and SBOM status to be returned in the normal scan result.
• Adds an 8hr timeout to veracode_sbom

Motivation and Context

• We wanted to add a timeout to veracode_sbom, as we had run into issues with some scans looping infinitely.
• With a timeout and prior to this PR, we would get no feedback about the SBOM scan timing out.
• Now, a notification about the timeout will be visible in the API results and in the Artemis web UI.

How Has This Been Tested?

• Tests pass
• Working locally
• Working in nonprod

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to change)

Checklist

• My code follows conforms to the coding standards.
• My change requires a change to the documentation.
• I have updated the documentation accordingly.
• I have added tests to cover my changes.
• All new and existing tests passed.