Add dependency scanning vars specifying advisory db in the bundler-audit analyzer

What does this MR do?

This MR adds two new variables to the dependency scanning template. These variables control the bundler-audit analyzer's internal advisory db.

Does this MR meet the acceptance criteria?

Conformity

• Changelog entry
• Documentation (if required)
• [-] Code review guidelines
• [-] Merge request performance guidelines
• [-] Style guides
• [-] Database guides
• [-] Separation of EE specific content

Closes #37722 (closed)