Add `scan.analyzer` field to the security report. Report analyzer version in the log, instead of the scanner version (!25)
