add grype scan action. enable for 1 scan job in alpha build for testing

[St0rmz1]

What this PR does / why we need it:

Updates to how we run security scans on images

• New reusable action scan-image
• All scans use grype instead of Trivy
• Added a default .grype config
• The alpha.yaml workflow uses the new scan-image action, with feature parity we previously had
• Sarif files will always be generated, regardless of types or numbers of vulns found
• All Sarif gets enriched via the properties section, which is intended to be used a customizable field per the Sarif spec
• image ref, name, tags are now uniform
• daily-image-scans.yml is used to run daily scans on the existing images we have published on dockerhub (only the most recent 'versioned' release. Meaning we don't scan the nightly or alpha releases with this job.

Which issue(s) this PR fixes:

NONE

Does this PR require a test?

NONE

Does this PR require a release note?

NONE

Does this PR require documentation?

NONE

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.