README is incorrect for TRIVY now enabled by default

change the doc to tell that trivy is new enabled by default