Bomly CLI v0.16.0

What's Changed

• feat(cli): rename plugin command to plugins (keep plugin alias) by @bomly-guy in https://github.com/bomly-dev/bomly-cli/pull/224
• feat: rename --container scan flag to --image (keep --container alias) by @bomly-guy in https://github.com/bomly-dev/bomly-cli/pull/205
• ci: upload SLSA provenance by release ID, not via the generator's auto-upload by @bomly-guy in https://github.com/bomly-dev/bomly-cli/pull/225

Full Changelog: https://github.com/bomly-dev/bomly-cli/compare/v0.15.4...v0.16.0

---

Release artifacts

• Full builtin bomly archives for Linux, macOS, and Windows.
• Alternate bomly-lite archives for users who prefer external Syft and Grype binaries.
• Linux packages for Debian, RPM, Alpine, and Arch-compatible package managers.
• Homebrew, Scoop, and WinGet package-manager manifests or publishing pull requests.
• SHA256SUMS for release artifact verification, signed keylessly with cosign (SHA256SUMS.sigstore.json).
• SLSA Build Level 3 provenance (multiple.intoto.jsonl) generated by slsa-github-generator.

Each archive includes LICENSE, NOTICE, and a licenses/ directory with third-party license texts. See Verify release checksums for signature and provenance verification commands.