scorecard: add bundle metadata

[estroz]

Description of the change:

• cmd/operator-sdk/generate/bundle: write scorecard bundle metadata to annotations.yaml and bundle.Dockerfile
• cmd/operator-sdk/scorecard: use scorecard metadata config path if it exists, defaulting to tests/scorecard/config.yaml
• internal/annotations: consolidate annotations for metrics and scorecard in subpackages here
• internal/scorecard: encode "config.yaml" as hard-coded file name for the scorecard config, and add metadata to example annotations.yaml files

Motivation for the change: This PR adds scorecard bundle metadata "mediaType" and "config", which are written to bundle metadata on generate bundle when either --overwrite is set or metadata files do not exist. "config.yaml" is a hard-coded file name for the scorecard config file.

Checklist

If the pull request includes user-facing changes, extra documentation is required:

• Add a new changelog fragment in changelog/fragments (see changelog/fragments/00-template.yaml)
• Add or update relevant sections of the docs website in website/content/en/docs

/cc @jmccormick2001 @varshaprasad96 @joelanford

/kind feature

[camilamacedo86]

could we please use sigs.k8s.io/yaml instead of this one for we still closer as possible to rip all these other modules to dealing with yaml as well?

[estroz]

That isn't possible until we bump operator-registry versions since the struct being marshalled only has yaml tags. I don't think we'll bump versions until after v1.0.

[jmccormick2001]

I tested this out, seems to work as expected, I modified the annotations.yaml by adding operators.operatorframework.io.test.config.v1: tests/scorecard2/
operators.operatorframework.io.test.mediatype.v1: scorecard+v1

I added a tests/scorecard2 directory with a valid config.yaml file....
I then removed the tests/scorecard directory...

and then ran scorecard, it produced a configMap that holds those values and the tests ran ok....I verified the bundle.tar.gz in the configmap as follows:
kubectl -n default get configmap scorecard-test-qdwt -o jsonpath='{.binaryData.bundle.tar.gz}' | base64 -d > /tmp/bundle.tar.gz

this confirmed that the annotations.yaml included in the configmap matched what I expected.