Add bandit and spotbugs integrations

Integrate all analyzers discussed in gitlab-org/gitlab#364175 (closed). This runs the latest versions of analyzers against the baseline in baselines repository.

https://gitlab.com/gitlab-org/secure/gsoc-sast-benchmark/evaluator/-/pipelines/590151288 contains the diffs, all of them are empty, because generated reports match the baseline 1:1.