Write proposal to use Trivy file system scanner

[Daniel Pacak]

See the initial POC described in #692

Additional requirements (/cc @jerbia):

1. Whether to run the scanning pod on the same host (or not) should be configurable
2. If scanning pod is not scheduled on the same host, then the image pull policy should allow pulling the image