fix(ci): Hotfix permissions for trivy push and docker login

[toninis]

Summary

• Fix Docker login on cd workflow
• Use proper permissions for security upload results
  https://docs.github.com/en/code-security/code-scanning/integrating-with-code-scanning/uploading-a-sarif-file-to-github#example-workflow-for-sarif-files-generated-outside-of-a-repository

Ticket Link

Release Note

[mm-cloud-bot]

@toninis: Adding the "do-not-merge/release-note-label-needed" label because no release-note block was detected, please follow our release note process to remove it.

I understand the commands that are listed here

[toninis]

/release-note-none

[phoinixgrr]

[github-advanced-security]

You have successfully added a new Trivy configuration .github/workflows/ci.yml:build. As part of the setup process, we have scanned this repository and found 6 existing alerts. Please check the repository Security tab to see all alerts.