EU Cyber Resilience Act toolkit: component inventory, SPDX & CycloneDX SBOM, hash-chained snapshots, a posture score, and a CRA document generator.