Add SBOM, symbols, traces, and VEX files for CVE-2022-21661 SQLi case

- Created CycloneDX and SPDX SBOM files for both reachable and unreachable images.
- Added symbols.json detailing function entry and sink points in the WordPress code.
- Included runtime traces for function calls in both reachable and unreachable scenarios.
- Developed OpenVEX files indicating vulnerability status and justification for both cases.
- Updated README for evaluator harness to guide integration with scanner output.

ops/devops/sealed-mode-ci/plugins/standard.yaml

@@ -0,0 +1,18 @@
+bootstrapUser:
+  username: sealed-admin
+  password: ChangeMe11!
+passwordPolicy:
+  minimumLength: 8
+  requireUppercase: false
+  requireLowercase: true
+  requireDigit: true
+  requireSymbol: false
+passwordHashing:
+  algorithm: Argon2id
+  memorySizeInKib: 8192
+  iterations: 2
+  parallelism: 1
+lockout:
+  enabled: false
+tokenSigning:
+  keyDirectory: /certificates