remove ossf scorecard from composite action

[lhoupert]

Only the official ossf/scorecard-action can publish result on API, see
https://github.com/ossf/scorecard-action#workflow-restrictions

It doesnt make sense to add it to the composite. Maybe better to remove it from composite and add template example on how to use it in some repo .