* feat(ci): generate correct md/html output from trivy * split css from trivy template * remove code tags * use plain md * click to expand * use tccr in security scan docs