ci: run vuln and sonar nightly, not on every push !297

merged merged by cmc on 2026-09-06 22:25 UTC · krz/gitbay:ci-job-cost-177 into main