What are software composition analysis tools and how do they help organizations identify and manage open-source and third-party components in their software, when should businesses implement SCA solutions to prevent vulnerabilities, and how can they improve security, license compliance, and risk mitigation?