fix(action): trivy failure

[m-mizutani]

This pull request updates the .github/workflows/trivy.yml file to enhance the Trivy vulnerability scanning workflow. The key changes include renaming the workflow, modifying the trigger events, updating the permissions, and refining the steps for running and uploading the scan results.

Workflow updates:

• Renamed the workflow from "Vulnerability scan" to "trivy".
• Modified the trigger events to include push, a scheduled cron job, and workflow_dispatch.

Permissions and steps updates:

• Added specific permissions for security-events, actions, and contents.
• Updated the actions/checkout and aquasecurity/trivy-action to specific commit references for better stability.
• Changed the Trivy scan output format to sarif and added TRIVY_DB_REPOSITORY environment variable.
• Added a conditional step to upload Trivy scan results to GitHub Security tab only if the scan fails.