Why CISOs should automate SBOM management with AI