Ingest SPDX and CycloneDX SBOMs. Enrich every component with FDA-required lifecycle data — maintenance status and end-of-support dates.