chore: replace terrascan

Terrscan does not support never versions of Terraform
failing on optionals for example

.github/workflows/checkov.yaml

@@ -0,0 +1,21 @@
+name: Checkov
+on: [ pull_request ]
+# https://github.com/marketplace/actions/terrascan-iac-scanner
+jobs:
+  terrascan:
+    runs-on: ubuntu-latest
+    name: checkov
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+      - name: Run Checkov
+        id: checkov
+        uses: bridgecrewio/checkov-action@master
+        with:
+          directory: .
+          framework: terraform
+      - name: Upload SARIF file
+        uses: github/codeql-action/upload-sarif@v3
+        with:
+          sarif_file: terrascan.sarif
+