Carlos wants the Trivy task to support running the scan on the Trivy server if the configuration is available

The trivy task currently only runs a local scan. That requires connection to github to pull down the vulnerability rules which fails in an air-gapped environment. It also fails to record the results in the server.

The task should read the url and credentials from a secret. If the secret exists and the values are provided then the trivy task should run the scan on the server. If not then it should run locally within the pod like it does today.