Move scorecards workflow away from labs

[javirln]

We are gradually transitioning away from using Chainloop Labs and adopting standard CLI commands directly, avoiding embedding them within workflows.

The objective of this task is to migrate the following workflow: https://github.com/chainloop-dev/chainloop/blob/main/.github/workflows/scorecards.yml

[javirln]

Reopening again since it seems it's now failing due to some env vars being sent. Weird because it didn't fail in the pull request.