Merge pull request 'fix(ci): stop mounting repo over /app in CybeDefend container' (#2) from fix/cybedefend-scan-app-mount into main

The CybeDefend CLI image runs from /app/cybedefend (its own binary and
sources live there). Mounting the checked-out repo at -v $WORKSPACE:/app
shadowed that binary, so the container failed with:

  exec: "/app/cybedefend": stat /app/cybedefend: no such file or directory

Mount the repo at /src instead so /app (and its entrypoint) stays intact.
Verified locally: docker run --rm -v <dir>:/src -w /src ghcr.io/cybedefend/cybedefend-cli:latest --help now runs correctly.

.gitea/workflows/cybedefend-scan.yml

@@ -24,7 +24,7 @@ jobs:
           CYBEDEFEND_PROJECT_ID: ${{ secrets.CYBEDEFEND_PROJECT_ID }}
         run: |
           docker run --rm \
-            -v "${{ gitea.workspace }}":/app -w /app \
+            -v "${{ gitea.workspace }}":/src -w /src \
             -e CYBEDEFEND_PAT="$CYBEDEFEND_PAT" \
             -e CYBEDEFEND_PROJECT_ID="$CYBEDEFEND_PROJECT_ID" \
             ghcr.io/cybedefend/cybedefend-cli:latest \
@@ -37,7 +37,7 @@ jobs:
           CYBEDEFEND_PROJECT_ID: ${{ secrets.CYBEDEFEND_PROJECT_ID }}
         run: |
           docker run --rm \
-            -v "${{ gitea.workspace }}":/app -w /app \
+            -v "${{ gitea.workspace }}":/src -w /src \
             -e CYBEDEFEND_PAT="$CYBEDEFEND_PAT" \
             -e CYBEDEFEND_PROJECT_ID="$CYBEDEFEND_PROJECT_ID" \
             ghcr.io/cybedefend/cybedefend-cli:latest \