SBOM consumption instead of InRelease parsing

[commel]

As soon as the SBOM (#7) is integrated into the Actions process, we can retrieve the version information instead of using #5 from this.