Add ScoutSuite workflow for AWS security scanning

[science]

Summary

Add a reusable workflow for ScoutSuite to scan AWS accounts for security misconfigurations.

Background

ScoutSuite is an open-source multi-cloud security auditing tool that assesses security posture of cloud environments. It would complement our existing Semgrep (code) and Trivy (dependencies) scanning.

Requirements

• Create scoutsuite.yml reusable workflow
• Support AWS credential input (via OIDC or access keys)
• Upload results to DefectDojo (Scout Suite scan type)
• Document usage in README
• Consider scheduled runs (weekly?) vs on-demand

References

• ScoutSuite GitHub
• DefectDojo ScoutSuite parser

Labels

enhancement, security