DAST URL Scan should use a context

Summary

DAST URL scans run ZAP with an empty context. Moving forward we'd like all scans to use a context so that variables like DAST_AUTH_EXCLUDE_URLS are not ignored.

This issue was discussed in 293#note_410892087

Once this is done the documentation will need to be updated to remove the note stating DAST_AUTH_EXCLUDE_URLS is ignored.

Improvements

Risks

Involved components

Optional: Intended side effects

Optional: Missing test coverage