ci(update): make it possible to pass additional options to osv-scanner (backport of #9940)

[kumahq]

Automatic cherry-pick of #9940 for branch release-2.3

Generated by action

cherry-picked commit fc8b2e9
⚠️ ⚠️ ⚠️ Conflicts happened when cherry-picking! ⚠️ ⚠️ ⚠️

On branch release-2.3
Your branch is up to date with 'origin/release-2.3'.

You are currently cherry-picking commit fc8b2e9b4.
  (fix conflicts and run "git cherry-pick --continue")
  (use "git cherry-pick --skip" to skip this patch)
  (use "git cherry-pick --abort" to cancel the cherry-pick operation)

Changes to be committed:
	modified:   tools/ci/update-vulnerable-dependencies/update-vulnerable-dependencies.sh

Unmerged paths:
  (use "git add <file>..." to mark resolution)
	both modified:   .github/workflows/update-insecure-dependencies.yaml