ci-remote-files-to-s3

• brings oscap scanning to ironbank-pipeline (removing need for ib-oscap-redhat), see dependent MRs
  • this includes the oscap-scanner, security-guide, ib-oscap-debian container tar, ib-oscap-suse container tar
• moves squid to in-distro squid package (was centos 8)
• pin awscli to specific version to support nightly builds
• cleanup dockerfile flow
• all vat findings mitigated or verified