fix(cloud-security): exclude per-task runs from latest scan selection - #3341

This commit only merges another branch into the PR branch, so cubic completed this check without running an AI review. cubic will review your next non-merge commit.