fix(ci/cve-scanning): missing trivy https://github.com/aquasecurity/trivy-action/blob/master/entrypoint.sh lead me to believe it is already installed, despite https://github.com/actions/runner-images/blob/main/images/ubuntu/Ubuntu2204-Readme.md not listing it. But I overlooked that they're using their docker image for the action run. #1123