Add CI variable DS_IMAGE_SUFFIX to the Dependency Scanning CI template.
When DS_IMAGE_SUFFIX is set to "-fips", Dependency Scanning uses
the Docker images of Gemnasium that are based on Red Hat UBI 8,
and that are FIPS-enabled.

Changelog: added