🐛 fix reporting when policies are fetched from public registry

[chris-rock]

fixes #1071

When we run scans we have 3 different cases we need to handle:

1. use local bundle
2. public registry, which is default when not authenticated with Mondoo platoform and no local bundle was provided
3. authenticated with Mondoo platform with upstream reporting
4. authenticated with Mondoo platform in incognito mode but with upstream policies

Before this PR we did different ways of handling. We harmonize the fetching of the bundles for the reported now. We always use the services.GetBundle() independently of the cases above. This simplifies the code base.

It is also important to note that having a configuration does not mean that it includes upstream config. A simple config could be:

auto_update: true
log-level: info

TODO:

• For reporting we want to fetch the bundle only once when we are authenticated

[github-actions]

Test Results

  1 files  ±0   24 suites  ±0   17s ⏱️ ±0s
290 tests +1  289 ✅ +1  1 💤 ±0  0 ❌ ±0 
291 runs  +1  290 ✅ +1  1 💤 ±0  0 ❌ ±0 

Results for commit 6f31b3a. ± Comparison against base commit a8defa1.

♻️ This comment has been updated with latest results.