feat: integrate vendor with scan/apply/vex — scan --vendor/--detached… #319

Job	Run time
test (windows-latest)	21m 15s
e2e-docker (maven)	3m 43s
dispatch-tests	11s
clippy	48s
coverage-docker (nuget)	4m 54s
lint-ecosystems	9s
coverage-docker (golang)	4m 56s
test (macos-latest)	8m 5s
test-release	19m 40s
coverage-docker (deno)	5m 8s
coverage	6m 2s
test (ubuntu-latest)	8m 14s
coverage-docker (pypi)	5m 40s
coverage-docker (gem)	5m 3s
coverage-docker (cargo)	5m 0s
e2e-docker (gem)	4m 3s
coverage-docker (npm)	5m 11s
setup-matrix (pypi)	4m 14s
e2e-docker (nuget)	4m 11s
coverage-docker (composer)	5m 7s
setup-matrix (npm)	3m 45s
e2e-docker (npm)	4m 7s
setup-matrix (maven)	4m 9s
e2e-docker (deno)	4m 8s
setup-matrix (golang)	2m 45s
e2e-docker (composer)	4m 2s
setup-matrix (composer)	3m 9s
e2e-docker (pypi)	4m 31s
setup-matrix (nuget)	3m 11s
setup-matrix (deno)	3m 6s
e2e-docker (golang)	3m 51s
setup-matrix (gem)	3m 11s
coverage-docker (maven)	5m 22s
e2e-docker (cargo)	4m 9s
setup-matrix (cargo)	3m 5s
coverage-merge	22s
e2e (ubuntu-latest, e2e_safety_cargo_build)	1m 35s
e2e (ubuntu-latest, e2e_composer)	1m 18s
e2e (macos-latest, e2e_safety_pnpm)	2m 34s
e2e (ubuntu-latest, e2e_safety_pnpm)	1m 37s
e2e (macos-latest, e2e_safety_cargo_build)	2m 2s
e2e (ubuntu-latest, e2e_golang)	1m 35s
e2e (ubuntu-latest, e2e_maven)	1m 28s
e2e (ubuntu-latest, e2e_nuget)	1m 31s
e2e (ubuntu-latest, e2e_cargo)	1m 26s
e2e (windows-latest, e2e_safety_pnpm)	3m 39s
e2e (windows-latest, e2e_safety_cargo_build)	3m 50s
	3h 21m 2s

Provide feedback