Fix release SBOM: disable sbom-action auto-upload to prevent artifact conflicts

Matrix jobs all tried to auto-upload SBOMs with the same default artifact
name, causing 409 Conflict. Set upload-artifact: false since we handle
artifact upload explicitly with actions/upload-artifact.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: SecAI-Hub

.github/workflows/release.yml

@@ -106,6 +106,7 @@ jobs:
           path: services/${{ matrix.service }}
           format: cyclonedx-json
           output-file: dist/${{ matrix.service }}-sbom.cdx.json
+          upload-artifact: false
 
       - name: Upload artifacts
         uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2