[testing] document the steps needed to enhance the snapshot tests

[prabhu]

Currently, there is a csv file with a list of repos. Should the user first execute cdxgen manually and submit the sbom to the cdxgen-samples repo?