feat: adds query and compute modes to scorecard certifer

[gaganhr94]

Description of the PR

This PR adds an API-based scorecard fetcher as an alternative to local scorecard execution, solving GitHub rate limiting issues for large-scale GUAC deployments. New API fetcher uses OpenSSF Scorecard REST API instead of using the scorecard package. Added --scorecard-fetcher-type flag to choose between "api" (default) or "local". API fetcher requires no GitHub tokens, thus eliminating the GitHub rate limiting issues.

Fixes #2783

PR Checklist

• All commits have a Developer Certificate of Origin (DCO) -- they are generated using -s flag to git commit.
• All new changes are covered by tests
• If GraphQL schema is changed, make generate has been run
• If GraphQL schema is changed, GraphQL client updates/additions have been made
• If OpenAPI spec is changed, make generate has been run
• If ent schema is changed, make generate has been run
• If collectsub protobuf has been changed, make proto has been run
• All CI checks are passing (tests and formatting)
• All dependent PRs have already been merged

[gaganhr94]

Hi, could someone please rerun the workflow which has failed? It seems to have failed due to something unrelated to our changes.