To make SAST methods available to CE, as a first step,
we moved the security reports scan.rb PORO
and its scan_spec.rb from the EE namespace to CE.

Changelog: changed