fix(ci/cve-scanning): make it a correct URI (#1690)

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

- Bug Fixes
- Fixed SARIF report artifact URIs to include the file:// scheme so
links to affected files are recognized and clickable by code-scanning
and security tools. This improves navigation from scan results to source
files in CI reports and dashboards, reducing broken links and making
developer triage and remediation more reliable.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

Author: cwrau

.github/scripts/sarif-report-collect-results.jq

@@ -17,7 +17,7 @@
                 (
                   .physicalLocation |= (
                     .artifactLocation |= (
-                      .uri |= "\($run.properties.chart):\($subChart):\(sub("^[^/]+/"; ""))"
+                      .uri |= "file:///\($run.properties.chart):\($subChart):\(sub("^[^/]+/"; ""))"
                     )
                   )
                 ) | (