Draft: Add appsec container scanning job

Why is this change being made?

To facilitate appsec scanning of our fips images.

Related: https://gitlab.com/gitlab-org/gitlab/-/issues/372766