Similar to scalibr https://github.com/google/osv-scalibr/pull/1730, we also want an `--allow-unsafe-plugins` flag to OSV-Scanner to gate plugins that may pose a security risk.