imagescan: Don't clobber before_script of parent job
When introducting the ability to create a .trivyignore we used before_script. However, this clobbers the parent before_script of the .docker job.
Fix by just putting it into the actual script section.