🌱 switch docker documentation to GHCR

[spencerschrock]

What kind of change does this PR introduce?

GHCR update

• PR title follows the guidelines defined in our pull request documentation

What is the current behavior?

We currently recommend the Google Container Registry images, instead of GitHub container registry. And the GHCR has a Go major version suffix, so we have

FROM ghcr.io/ossf/scorecard/v5:v5.4.0
FROM ghcr.io/ossf/scorecard/v4:v4.13.1-270-gd187f11e

What is the new behavior (if this is a feature change)?**

We recommend using GHCR and the package at the next release will lack the major version suffix, but still be tagged appropriately:

FROM ghcr.io/ossf/scorecard:v5.4.1

• Tests for the changes have been added (for bug fixes/features)

Which issue(s) this PR fixes

Special notes for your reviewer

Does this PR introduce a user-facing change?

For user-facing changes, please add a concise, human-readable release note to
the release-note

(In particular, describe what changes users might need to make in their
application as a result of this pull request.)

The container images for Scorecard will be published under `ghcr.io/ossf/scorecard`

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 69.70%. Comparing base (353ed60) to head (df5494f).
⚠️ Report is 298 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4885      +/-   ##
==========================================
+ Coverage   66.80%   69.70%   +2.89%     
==========================================
  Files         230      251      +21     
  Lines       16602    15649     -953     
==========================================
- Hits        11091    10908     -183     
+ Misses       4808     3867     -941     
- Partials      703      874     +171     

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

This pull request has been marked stale because it has been open for 10 days with no activity