List container scan findings

List the vulnerability findings of a container scan, sorted by severity descending. Provide exactly one of containerScanId (a specific scan) or containerImageId (resolves to that image's latest scan). Each finding includes the CVE id, affected package and installed version, fixed version (or null when no fix exists), the introducing layer digest, which engines detected it (and whether both did), severity, and generated description/remediation. The response's scan field reports the resolved scan's status and whether it failed, so a failed scan is distinguishable from a finished scan with zero findings.