Add an "attribution" section to the README

[idunbarh]

We should document how we want people to refer to this lifecycle in their projects.

CISA SBOM Community SBOM Generation Reference Implementation is probably not the correct answer.

[vpetersson]

How about the "SBOM Generation Primer", which is in line with the SBOM Sharing Primer?