ci: CCP-3438 draft pr testing

[WalterMoar]

Description

Update the PR pipeline to:

• run all Analysis tests when a PR is opened, including as a draft (this allows developers to check that the tests run before marking the PR as ready for review)
• run the OWASP ZAP Scan tests when the label zap is added to a PR (requires a deployment)

Type of change

• ci - continuous integration and deployment pipeline

How Has This Been Tested?

The analysis tests were tested with this PR and they ran as expected when it was opened as draft. The ZAP scan can't be tested until a deployment PR is created.

Checklist

• I have read the CONTRIBUTING doc
• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• My changes generate no new warnings
• I have added tests that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes
• Any dependent changes have already been accepted and merged

---

Thanks for the PR!

Deployments, as required, will be available below:

• Frontend
• Backend
• OpenAPI

Please create PRs in draft mode. Mark as ready to enable:

• Analysis Workflow

After merge, new images are deployed in:

• Merge Workflow