Harden runner policy block

[fraxken]

Update all workflows to use egress-policy equal block instead of default audit value.

• CLI
• scanner
• JS-X-Ray
• vulnera
• report
• ossf-scorecard-sdk
• npm-registry-sdk
• npm-security-fetcher
• landing

We may want to document somewhere how to implement exception to that (or link the doc)