fix: SBOM multi-ecosystem support with correct package managers and licenses (#8)

compliance-agent/src/pipeline/orchestrator.rs

@@ -263,7 +263,15 @@ impl PipelineOrchestrator {
             }
         }
 
-        // Persist SBOM entries (upsert by repo_id + name + version)
+        // Remove stale SBOM entries for this repo before reinserting
+        if !sbom_entries.is_empty() {
+            self.db
+                .sbom_entries()
+                .delete_many(doc! { "repo_id": &repo.id })
+                .await?;
+        }
+
+        // Persist SBOM entries
         for entry in &sbom_entries {
             let filter = doc! {
                 "repo_id": &entry.repo_id,