Update FoD pipeline to use "fcli action run ci"

[kadraman]

No description provided.

[Copilot]

Pull request overview

Updates the Azure DevOps Fortify on Demand (FoD) SAST pipeline template to run the Fortify CI “action” flow (fcli action run ci) instead of using the legacy FortifyOnDemandStatic@8 Azure DevOps task.

Changes:

• Adds explicit checkout configuration (clean workspace + persisted credentials).
• Replaces the FoD Azure DevOps task with Bash steps that install Fortify tooling via npx @fortify/setup and run fcli action run ci.
• Introduces FoD-related pipeline variable documentation and wires those variables into the scan step via env:.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github-actions]

Fortify vulnerability summary

Any issues listed below are based on comparing the latest scan results against the previous scan results in FoD release fortify/IWA-Java - azure-pipelines-fod-update. This is for informational purposes only and, depending on workflow, may not be an accurate representation of what issues will be introduced into or removed from the target branch when merging this PR.

New Issues

• No new or re-introduced issues were detected

Removed Issues

• Fix Validated (Static) - XML External Entity Injection:
  src/main/java/com/microfocus/example/web/controllers/UserController.java:587