Benchmark: Add sbom4python

Biased I know as I am the developer and maintainer of sbom4python, but useful to add this tool which generates NTIA conformant SBOMs in both CycloneDX and SPDX formats (assuming the metadata exists with the packages)

Can you submit a pull request? There shouldn't be much to do beyond adding one more script to benchmarks/. I'm getting around to reviewing the one that's been submitted already.