Use explicit version for schemas instead of submodules

Why is this change being made?

For gitlab-org/gitlab#340689 (closed)

This MR changes the schema tests to clone an explicit version of security-report-schemas instead of relying on git sub-modules, which are ambiguous.