Add instructions on syncing package advisories

What does this merge request do and why?

Adds more detailed docs to set up license scanning feature that is part of Dependency Scanning

Issue: #2001

Add instructions on how to sync a GDK instance with the package metadata database.

How to set up and validate locally

Numbered steps to set up and validate the change are strongly suggested.

N/A

Impacted categories

The following categories relate to this merge request:

• gdk-reliability - e.g. When a GDK action fails to complete.
• gdk-usability - e.g. Improvements or suggestions around how the GDK functions.
• gdk-performance - e.g. When a GDK action is slow or times out.

Merge request checklist

• This change is backward compatible. If not, please include steps to communicate to our users.
• Tests added for new functionality. If not, please raise an issue to follow-up.
• Documentation added/updated, if needed.
• Announcement added, if change is notable.
• gdk doctor test added, if needed.
• Add the ~highlight label if this MR should be included in the CHANGELOG.md.