Transition to rules syntax for Secure's vendored templates

For all of our vendored templates in Secure, we need to transition to rules: syntax as only/except is considered deprecated

As of the opening of issue, the timeframe for deprecation is not firm, but our best guess is %13.0, so we can shoot for that as a deadline.

Sub-issues:

Job templates

Update the job templates that ship with GitLab:

• Container Scanning: #36541 (closed)
• License Management: #36543 (closed)
• DAST: #36546 (closed)
• Dependency Scanning: #36547 (closed)
• SAST: #36548 (closed)

This impacts GitLab users.

Security tools

Update the CI configuration files of the Secure projects:

• Container Scanning
• License Management
• DAST
• Dependency Scanning
• SAST
• ci-templates (CI configs for analyzers and test projects)
• analyzers not using the shared CI config (TBD)
• gemnasium-db
• gemnasium-db-toolbox

This impacts developers of the Secure projects.