activate scans?

here are some scans/ tests/ coverage thresholds that https://github.com/cap-java/cds-feature-attachments has and which _may_ make sense for this plugin as well:
- blackduck (search for `BLACK_DUCK_TOKEN`)
- sonarcube (search for `SONARQ_TOKEN`)
- `spotbugs-maven-plugin`
- `maven-pmd-plugin`
- `jacoco-check-unit-tests-only` → `check`
- Mutation Testing
- ...

just an FYI!