[ehl-jf]

Description

The Audit stage in the release Jenkinsfile fails with:

could not find any of the required executables ('unzip', '7z') in the system PATH to run the Advanced Security Scans

The docker-ubuntu20-xlarge agent does not ship with unzip or 7z, which the JAS scanners require to unpack their analyzer bundles.

This change installs unzip on demand inside the Audit stage (only when neither unzip nor 7z is already present), right before invoking jf audit. The install is guarded so re-runs and future image upgrades are no-ops.

---

• All tests have passed. If this feature is not already covered by the tests, new tests have been added.
• The pull request is targeting the master branch.
• The code has been validated to compile successfully by running go vet ./....
• The code has been formatted properly using go fmt ./....

---