Skip sbom for dev/test tasks

[mjnagel]

Describe what should be investigated or refactored

Currently we use the same creation tasks for both dev/test and release processes:

• Release Creation: Create tasks
• Test Creation: Test tasks which call the same creation tasks

Our creation tasks (for example standard package) do not specify any special options for --skip-sbom so that SBOMs are always generated. For dev/test this is not necessary and could add a minute or two due to the amount of images included in our core package.

Possible Fixes

UDS Common includes an input in their create task that allows for passing in additional options to the zarf args. We could use this to pass in --skip-sbom when we are certain we are running a dev/test creation.

Additional context

We need to be careful to make sure we still include SBOMs for release CI.