CI: removed DAST security check (not available in free profile) and added Owasp ZAP execution (non blocking)