Add OSS Scanner Dockerfile and threat model (#4208)

Build the fuzz harnesses and unit tests for Anthropic's OSS Scanner and describe the threat model. Classify .oss-scanner/ as metadata in change_impact.py.