chore: add zap scan

[drewbo]

Changes proposed in this pull request:

• Adds ZAP scanning for core/admin/queues
• Uploads the results to S3

security considerations

This adds an admin test user to the database to scan sites, it is removed after scanning.