[v1] Back-port of common and analyzers v2

What does this MR do?

Back-port version 2.x of the common library and the analyzers.

• change the pipeline to do QA using test projects
• switch to common/v2, gemnasium/v2, etc.
• make the common/v2/orchestrator generate v1 report

This depends on gitlab-org/security-products/analyzers/common!60 (merged)

What are the relevant issue numbers?

gitlab-org/gitlab#34853 (closed)

Does this MR meet the acceptance criteria?

• Changelog entry added
• [-] Documentation created/updated for GitLab EE, if necessary
• [-] Documentation created/updated for this project, if necessary
• [-] Documentation reviewed by technical writer or follow-up review issue created
• Tests added for this feature/bug
• [-] Job definition updated
• [-] Conforms to the code review guidelines
• [-] Conforms to the Go guidelines
• Security reports checked/validated by reviewer