How to build secure CI/CD pipelines with SBOM generation, container image signing, and compliance gates - practical …