Option to disable the scanner from metadata file

There is a difference in --skip-scan and scanignore=*. While the first one doesn't run the scanner, the second ignores everything. However, since we setup the scanner to error (stop the build), on unused ignores, it will break when we scanignore=* but remove files in init/prebuild.