BST-18082 Add tests for composition and npm-audit scanners

Migrated test targets from boost-sandbox module-tests repositories
to the new test harness.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: lindycoder

scanners/boostsecurityio/composition/tests.yaml

@@ -0,0 +1,12 @@
+version: "1.0"
+tests:
+  - name: "hounddog-test-healthcare"
+    type: "source-code"
+    source:
+      url: "https://github.com/hounddogai/hounddog-test-healthcare-app.git"
+      ref: "main"
+  - name: "sones"
+    type: "source-code"
+    source:
+      url: "https://github.com/sones/sones.git"
+      ref: "master"

scanners/boostsecurityio/npm-audit/tests.yaml

@@ -0,0 +1,7 @@
+version: "1.0"
+tests:
+  - name: "pnpm"
+    type: "source-code"
+    source:
+      url: "https://github.com/pnpm/pnpm.git"
+      ref: "main"