- Add Image provider SDK with registry adapters (Docker Hub, OCI)
- Integrate Image scan path in Scan class alongside IaC provider
- Add CheckReportImage model and Finding output block for image results
- Add IMAGE enum, UID validation, and migration to API models
- Skip compliance and attack surface tasks for Image/IaC providers
- Bump Trivy to v0.69.1 and allow hyphenated CheckIDs for image provider
