ci(update): fix sca extra opts

[saisatishkarra]

Checklist prior to review

Fixes the below warning in https://github.com/kumahq/kuma/actions/runs/8718225773/job/23915005504

Warning: Unexpected input(s) 'github-token', valid inputs are ['image', 'path', 'sbom', 'fail-build', 'output-format', 'severity-cutoff', 'only-fixed', 'add-cpes-if-none', 'by-cve', 'grype-version', 'vex']
Run anchore/scan-action@v3.6.4
  with:
    sbom: sbom.spdx.json
    output-format: table
    fail-build: false
    add-cpes-if-none: true
    severity-cutoff: critical
    github-token: ***
    only-fixed: false
    by-cve: false

Backport

This should be backported to 2.7

• Link to relevant issue as well as docs and UI issues --
• This will not break child repos: it doesn't hardcode values (.e.g "kumahq" as a image registry) and it will work on Windows, system specific functions like syscall.Mkfifo have equivalent implementation on the other OS --
• Tests (Unit test, E2E tests, manual test on universal and k8s) --
  • Don't forget ci/ labels to run additional/fewer tests
• Do you need to update UPGRADE.md? --
• Does it need to be backported according to the backporting policy? (this GH action will add "backport" label based on these file globs, if you want to prevent it from adding the "backport" label use no-backport-autolabel label) --