fix(ci): container_scanning downloads changed-images.txt (skip works)

Template dependencies:[] prevented changed-images.txt download → skip didn't fire → 15 scans failed on non-existent candidates. Override dependencies:[detect-changes].