added signed artifacts and SBOM generation capabilities

internal/models/migrations/001_init.go

@@ -52,5 +52,11 @@ func Run(engine *xorm.Engine) error {
 	if err := Run013(engine); err != nil {
 		return err
 	}
-	return Run014(engine)
+	if err := Run014(engine); err != nil {
+		return err
+	}
+	if err := Run015(engine); err != nil {
+		return err
+	}
+	return Run016(engine)
 }

internal/models/migrations/015_signing.go

@@ -0,0 +1,10 @@
+package migrations
+
+import (
+	"github.com/forgeo/forgebucket/internal/models"
+	"xorm.io/xorm"
+)
+
+func Run015(engine *xorm.Engine) error {
+	return engine.Sync2(&models.ArtifactSignature{})
+}

internal/models/migrations/016_sbom.go

@@ -0,0 +1,10 @@
+package migrations
+
+import (
+	"github.com/forgeo/forgebucket/internal/models"
+	"xorm.io/xorm"
+)
+
+func Run016(engine *xorm.Engine) error {
+	return engine.Sync2(&models.SBOMReport{})
+}