update add upload meta SBOM gen

[pxp928]

Adds:

**Repository Traceability Flags:**
- `--forge` - Source forge hostname (e.g., `github.com`, `gitlab.com`, `github.enterprise.com`)
- `--org` - Organization/owner name in the forge
- `--repo` - Repository name in the forge
- `--subrepo-path` - Path to subrepo within the repository (auto-derived from `--file-path` if not specified)

to kusari platform upload