chore(catalog): add Web Application Attack injector to the marketplace catalog (#6720)

[SamuelHassine]

Summary

Split from #6721 (one PR per injector, as requested). Adds the Web Application Attack
injector entry (slug openaev_webapp, image openaev/injector-webapp, container_type INJECTOR,
container_version "rolling") to the marketplace catalog
(openaev-api/src/main/resources/catalog/catalog-integrators.json) so it
shows up in the in-product marketplace.

Details

• Title, description, short description, use cases, subscription link and
  slug are taken from the injector's manifest-metadata.json in
  injectors-python. The slug matches the canonical injector_type declared
  in the injector's config loader.
• config_schema copies the standard base block from existing INJECTOR
  entries (OPENAEV_URL, OPENAEV_TOKEN, OPENAEV_TENANT_ID, INJECTOR_ID,
  INJECTOR_NAME, INJECTOR_LOG_LEVEL); the injector only uses the base block, matching its config.yml.sample / .env.sample.
• Consistency flags match the existing injector entries: verified true,
  manager_supported true, playbook_supported false, max_confidence_level 80.
• The entry is inserted at a unique position in the contracts array so the
  11 split PRs merge conflict-free in any order (entry order in the catalog
  is not semantic).

Test plan

• catalog-integrators.json parses as valid JSON (Python json.loads).
• Diff is a single added entry; no existing entry is removed, reordered or
  altered.
• The entry satisfies the ingestion parser
  (CatalogConnectorIngestionService): types/formats map to the supported
  enums; password fields use format: password + writeOnly.

Closes #6720

[Copilot]

Pull request overview

Adds a new marketplace catalog contract entry so the Web Application Attack injector (openaev_webapp) appears in the in-product marketplace.

Changes:

• Added a new INJECTOR contract entry for Web Application Attack with container_image openaev/injector-webapp and container_version rolling.
• Included an embedded PNG logo (base64) and a config_schema matching the existing “base block” injector configuration keys.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 45.35%. Comparing base (e21d32a) to head (9a3fffd).

❌ Your project check has failed because the head coverage (2.93%) is below the target coverage (80.00%). You can increase the head coverage or adjust the target coverage.

Additional details and impacted files

@@             Coverage Diff              @@
##               main    #6767      +/-   ##
============================================
+ Coverage     45.33%   45.35%   +0.01%     
  Complexity     8029     8029              
============================================
  Files          2364     2364              
  Lines         66751    66751              
  Branches       9033     9033              
============================================
+ Hits          30260    30272      +12     
+ Misses        34513    34500      -13     
- Partials       1978     1979       +1     

Flag	Coverage Δ
backend	67.63% <ø> (ø)
e2e	17.75% <ø> (+0.39%)	⬆️
frontend	2.93% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.