refactor: use node20 instead of composite

[DmitriyLewen]

Description

We tried the following actions/methods to install Trivy (mostly for trivy-action):

• docker action - we switch to composite action since docker action doesn't have an option to save trivy cache (trivy-db, trivy-java-db, etc.)
• download and use install script - users reported that some runners don't contain curl, wget, sudo, etc. (see trivy-action attempts to run sudo on the local machine (!?) trivy-action#403)
• use jaxxstorm/action-install-gh-release - users reported that their security doesn't allow using an unverificated action (see Cannot run trivy as of today, problem with dependency trivy-action#409)
• use git (checkout action) + install script (current logic) - to use this way in GES - required to generate a token for github.com. We created input for this, but it is still not a solution for some users (see Setup action v0.2.1 failing on GitHub Enterprise Server #10 (comment)).

popular setup-* actions use nodejs action (e.g. setup-python, setup-go).
setup-go supports cache. So we can try to switch to nodejs action.