ci(security): disable spotbugs-sast (Java analyzer, no Java)
spotbugs-sast fails every pipeline (tries gradle assemble, no Java project). Advisory noise. semgrep covers our stack. Same as !178 (merged) (nodejs-scan-sast).
spotbugs-sast fails every pipeline (tries gradle assemble, no Java project). Advisory noise. semgrep covers our stack. Same as !178 (merged) (nodejs-scan-sast).