[Bug]: Trivy invoked with deprecated --security-checks flag

[Abhineshhh]

Version

sbi version: main @ d9404ec
Trivy pin: v0.69.3 (.github/tool-versions.sh)
Go: 1.26.5

What happened?

RunTrivy uses --security-checks (e.g. vuln / vuln,secret,config). Upstream renamed this to --scanners and marks --security-checks deprecated. With current Trivy, config is also deprecated in favor of misconfig under --scanners.

This works today via alias but will break when the alias is removed.

Expected: Use --scanners vuln and --scanners vuln,secret,misconfig for comprehensive mode.

Steps to reproduce

1. Read RunTrivy in pkg/infrastructure/scanner/trivy.go.
2. Compare with Trivy v0.69.3 flag definitions (ScannersFlag / deprecated security-checks).