scan.yml action to use the main action

[jdolitsky]

scan.yml is currently not using the github action provided by this repo.

modify the action to allow BigQuery writes and disable attestation

[jdolitsky]

Example (trivy):

    - uses: chainguard-dev/rumble@main
      with:
        image: "${{ matrix.apkoBaseTag }}:${{ matrix.apkoTargetTag }}"
        scanner: trivy