SBOMs for Python packages project

[brettcannon]

@pf_moore

I’m normally the default delegate for packaging interoperability PEPs, but I don’t feel like I have sufficient understanding of (or interest in) this topic to pick this one up.

If you’re asking for a volunteer then I can at least put my hand up since this is sort of like licenses where I suspect MS would be supportive of me helping to improve the situation.