Update to use vulnerability-scan runner [skip ci] (#11958)

Required by ProdSec team to enable new malware scan.

note: this change does not enable the malware scan directly but try to
change to use the new shared runner within NVIDIA org.

After merging this change, we will need to ask the Blossom team to
enable the actual malware scan internally

Signed-off-by: Peixin Li <[email protected]>

.github/workflows/blossom-ci.yml

@@ -90,7 +90,7 @@ jobs:
   Vulnerability-scan:
     name: Vulnerability scan
     needs: [Authorization]
-    runs-on: ubuntu-latest
+    runs-on: vulnerability-scan
     steps:
       - name: Checkout code
         uses: actions/checkout@v4