feat: allow SBOM --monitor opt-in at group level [OSF-466]

[jacek-rzrz]

Pull Request Submission Checklist

• Follows CONTRIBUTING guidelines
• Commit messages
  are release-note ready, emphasizing
  what was changed, not how.
• Includes detailed description of changes
• Contains risk assessment (Low | Medium | High)
• Highlights breaking API changes (if applicable)
• Links to automated tests covering new functionality
• Includes manual testing instructions (if necessary)
• Updates relevant GitBook documentation (PR link: ___)
• Includes product update to be announced in the next stable release notes

What does this PR do?

This change upgrades the os-flows and sbom extensions in order to allow the sbom --monitor feature to be enabled at the group level.

Where should the reviewer start?

Bringing in these changes:

• feat: register registry-based sbom monitor group opt-in flag [OSF-466] cli-extension-os-flows#271
• feat: allow sbom test --report/--monitor via registry-based group opt-in [OSF-466] cli-extension-sbom#202

How should this be manually tested?

Try snyk sbom --monitor after enabling enableSbomMonitor in the group admin page.

What's the product update that needs to be communicated to CLI users?

No product update - internal feature to help rollout in the Scotia env.

[snyk-io]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[snyk-pr-review-bot]

PR Reviewer Guide 🔍

🧪 No relevant tests

🔒 No security concerns identified

⚡ No major issues detected

📚 Repository Context Analyzed This review considered 5 relevant code sections from 4 files (average relevance: 0.98) CLAUDE.md (2 segments, lines 1-94) package.json (lines 1-236) scripts/upgrade-snyk-go-dependencies.go (lines 1-149) package-lock.json (lines 19745-19957)

🤖 Repository instructions applied (from AGENTS.md)