feat/trivyEndpoint

See merge request !52

Revert temporary permitAll authorization in notification endpoint.

ci: add missing curl

See merge request !51

- seperated tool result queries and db operations into two distinct functions. This enables us to use coroutines in the query function and be synchronous (transactional) for the db operation
- Transactional statements rely on EnableAspectJAutoProxy annotation, which was previously missing
- added locktypes to repository interfaces
- now mainly using transaction propagation type REQUIRED to create a new transaction (this is more a backup since we should always have a transaction due to the annotations in the controllers)