Move first scan after the AppSec devtools plugin first init

[tamasmak]

• This ensures that the first vulnerability scan during the startup is run after AppSec devtools plugin is setup
• Improves the scan event listener registration debug message