publishToQueue feature flag and add certifiers to guaccollect pipeline

[pxp928]

Description of the PR

• publishToQueue flag (default to true) allows users to pause publishing to the queue. This does not stop the blob store from storing the document. This can be used if you want to instead use a bucket event to drive the pipeline.

• OSV and scorecard certifier have been added to guaccollect so that they can follow the same blob store and pubsub pipeline.

PR Checklist

• All commits have a Developer Certificate of Origin (DCO) -- they are generated using -s flag to git commit.
• All new changes are covered by tests
• If GraphQL schema is changed, make generate has been run
• If OpenAPI spec is changed, make generate has been run
• If collectsub protobuf has been changed, make proto has been run
• All CI checks are passing (tests and formatting)
• All dependent PRs have already been merged