Remove report dependency

What does this MR do?

The SAST IDE service is not an analyser. Depending on the report module includes many transitive dependencies we do not need and it hides some of the functionality. Explicitly adding only the code we need for our purposes and eliminate dependencies makes it easier for us to evolve the service code independently.

What are the relevant issue numbers?

Distill sast-ide branch down to include the bar... (gitlab-org/gitlab#478877 - closed) • Julian Thome • 17.4

Does this MR meet the acceptance criteria?

• Changelog entry added
• Documentation created/updated for GitLab EE, if necessary
• Documentation created/updated for this project, if necessary
• Documentation reviewed by technical writer or follow-up review issue created
• Tests updated/added for this feature/bug
• Job definition updated, if necessary
  • Auto-DevOps template
  • Job definition example
  • CI Templates
• Conforms to the code review guidelines
• Conforms to the Go guidelines
• Security reports checked/validated by reviewer