WIP: Update qa-sast.yml

Use jq instead of diff as we do not care about ordering

See related issue/MR for discussion https://gitlab.com/gitlab-org/security-products/tests/sast/issues/3

This MR is purely a PoC to demonstrate an alternative approach if we want to go this direction. If so then we can update all QA images accordingly.