Consider adding HIPAA partners

[ebeneliason]

From this slack message:

I don’t really want to advertise that we are partnered with someone we’re not. But perhaps we could do a little research on the partners, figure out what we would do to have a first-class integration with them, and add that to our features? For example, for Vanta, I believe you install an agent in AWS somehow that scans all your traffic for compliance. Maybe we pre-install the agent for you.

[zackproser]

Vanta offers ECR image vulnerability scanning as described here. The setup involves:

• Creating an IAM user for Vanta
• Creating IAM policies granting the IAM Vanta user access to ECR image scanning, and other permissions
• Enabling "Scan on Push" for all target ECR repositories