Add Run Static Image Scan: Vulnerability Step to Full Pipeline - Gripe & OpenScap

[dwinchell]

Someday gripe based on Syft sbom results

[dwinchell]

Success Criteria:

• The full pipeline has a "Run STatic Image Scan: Vulnerability" step
• The step happens between the Create Container Image step and the Push Container Image to Repository step
• spring-petclinic is configured to use the the Anchore step implementer for this step

Notes:

• PSR --step argument is container-image-static-vulnerability-scan
• The miro diagram has a diagram of where in the workflow the step happens - as shown in the miro diagram - https://miro.com/app/board/uXjVOwDnDyI=/