Put the SBOM vulnerabilities before the per-tool sections

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

report_generator/context.py

@@ -90,7 +90,7 @@ def build_context(
         context["critical"] = critical
 
     if sca is not None:
-        context["sections"].append(_sca_section(sca))
+        context["sections"].insert(0, _sca_section(sca))
 
     set_aside = _set_aside_section(tools)