feat: establish sbom nexus extraction slice

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a028f0-a42f-7582-89a8-ebaad7343834

Containerfile

@@ -0,0 +1,17 @@
+FROM python:3.12-slim
+
+WORKDIR /app
+COPY pyproject.toml uv.lock README.md /app/
+COPY src /app/src
+
+RUN pip install --no-cache-dir .
+
+RUN useradd --create-home --uid 10001 sbom-nexus \
+    && mkdir -p /data \
+    && chown sbom-nexus:sbom-nexus /data
+
+USER sbom-nexus
+ENV SBOM_NEXUS_DATABASE_PATH=/data/sbom-nexus.db
+EXPOSE 8010
+
+CMD ["sbom-nexus", "serve", "--host", "0.0.0.0", "--port", "8010"]