Augment PyPI dataset to include SBOM info on files when present

[nightlark]

PyPI packages (most likely Linux ones?) can contain SBOM listing where compiled files came from. This could be useful to include in the PyPI dataset for tying compiled libraries from PyPI wheels to the actual project they are from.