✨ Add go-licenses and cyclonedx-gomod to image ✨

Install go-licenses (dependency license scanner) and cyclonedx-gomod
(CycloneDX SBOM generator) via the go-tools build stage alongside the
other compiled tools.
- Dockerfile: add go install for go-licenses and cyclonedx-gomod in the go-tools stage
- README.md: add License & SBOM section to the included tools table

Dockerfile
README.md

README.md

@@ -180,6 +180,13 @@ volumes:
 | `ko` | Build Go container images without a Dockerfile |
 | `air` | Live-reload dev server for iterative development |
 
+### License & SBOM
+
+| Tool | Purpose |
+|------|---------|
+| `go-licenses` | Scan all dependencies and report their licenses |
+| `cyclonedx-gomod` | Generate a CycloneDX SBOM from a Go module |
+
 ### Language server
 
 | Tool | Purpose |