feat(ci): add InfraScan Audit workflow

[igor-soldev]

Summary

This PR introduces the InfraScan Audit GitHub Actions workflow to automate infrastructure auditing for every push and pull request.

The motivation for adding this automated scan comes from an initial manual audit performed via the InfraScan Web Version, which identified several critical areas for improvement:

• Overall Grade: F (25%)
• Findings: While IaC Security and Cost Optimization scored an A (100%), the scan revealed 7 high-severity container vulnerabilities across images like postgres, elasticsearch, and keycloak, totaling over 1000 security findings.

By integrating this workflow, we ensure that every code change is automatically audited for security risks, container vulnerabilities, and cost optimizations, helping us move toward a passing grade.

Test Plan

• Verified the .github/workflows/infrascan.yml syntax.
• Ensured the Upload InfraScan Report step uses if: always() to provide diagnostic artifacts even if the scan identifies critical failures.

Notes

• Artifacts: The generated HTML reports are stored as GitHub Action artifacts and are retained for 14 days.
• Scanner: The workflow uses soldevelo/infrascan@v1.0.5 with the comprehensive scanner setting.