Trivy + ClamAV + Gemini AI scan Docker images for malware and vulns, blocking threats pre-install