Where a CBOM solution actually sits: fitting cryptographic inventory into your architecture