Fix Maven SBOM publishing (worked in 3.0.0-rc4 but not in rc5 or later)

[cowtowncoder]

With https://github.com/FasterXML/jackson-future-ideas/wiki/JSTEP-14 all Jackson repos have Maven build capable of producing CycloneDX sboms. But although 2.20+, 3.0+ should do that, something in build broke with changes to use Central portal so the only published version with sboms seems to be 3.0.0-rc4:

https://repo1.maven.org/maven2/tools/jackson/core/jackson-databind/3.0.0-rc4/

I suspect this is related to something about plug-in binding to build phases differing b/w old sonatype nexus publishing plug-in and new one. But I couldn't figure it out last I checked.
But I hope someone does.

NOTE: while filed against jackson-databind this affects all Jackson repos.

[cowtowncoder]

Note: running

./mvnw -DskipTests clean install

does not seem to produce expected Cyclone sbom artifact: it probably should (although what we really care about is ./mvn -DskipTests clean deploy).