Schema validation for clair report

[zregvart]

Extracted from #1180 (comment):

We should probably have some data validation on the report itself. Maybe as a follow up?
While this is possible and not a lot of work, the schema that is currently available at https://github.com/quay/clair/blob/main/openapi.yaml (revision 0a3a4611964014c0c9846d8c79acdd062af9c17d) does not successfully validate the generated report.

The packages.*.source.source is declared as string in the schema, but it is an object in the report. Something to followup with the Quay Clair team.

[zregvart]

Preliminary work here, the report is failing the schema validation as stated above.

[zregvart]

Raised an issue with Clair: quay/clair#2161

[zregvart]

The issue was resolved https://github.com/quay/clair/blob/main/httptransport/openapi.json should be okay to use