Add Tool: AI PBOM - AI Privacy Posture & Data Map

[k-nithin]

• Add AI PBOM tool documentation to README and create project configuration files

Adds a tool entry for AI PBOM under tools/risk-assessment/, per the contribution template.

What it does

AI PBOM inventories AI-related data assets (tables, vector stores, prompt logs, training data, transcripts, files), detects PII/credentials/sensitive content, maps assets to the AI applications that consume them, and produces an explainable, additive risk score (0-100) with traceable drivers — output as a JSON PBOM plus a Markdown report.

Why it fits Privacy Risk Assessment

• Purpose-built for AI-specific asset types (vector stores, prompt logs, training data) that general data-discovery tools don't model.
• Risk scores are explainable/additive, not a black-box number
  — every score traces back to specific findings, which supports privacy office and governance review workflows. - Grounded in a published threat model (T1–T4) and gap analysis
  — see the linked SSRN paper.