During transition to rules syntax, we missed the condition required to
ensure DAST jobs only execute if a cluster is present. Replacing the
previous `only:kubernetes` behavior, we need `CI_KUBERNETES_ACTIVE`

Relates to https://gitlab.com/gitlab-org/gitlab/-/issues/224117