feat(parsers): add Orca Security CSV and JSON parser

[skywalke34]

Description

New parser for Orca Security. Orca Security is a cloud security platform that provides agentless security and compliance for AWS, Azure, GCP, and Kubernetes environments.

The parser:

• Parses both CSV and JSON alert exports from Orca Security
• Auto-detects file format (JSON arrays start with [, otherwise CSV)
• Maps 12 CSV fields and 10 JSON fields to DefectDojo Finding fields
• Converts OrcaScore (float 0-10) to DefectDojo severity levels
• Stores Orca labels as finding tags for searchability
• Sets active/inactive status based on Orca alert status
• Uses hashcode deduplication via title + component_name configured in settings.dist.py

Note on Category field: Category metadata (e.g., "IAM misconfigurations") is included in the structured markdown description alongside other alert metadata, rather than as a tag. Orca's Labels field is stored as tags.

Test results

7 unit tests covering:

• CSV: no findings, one finding, many findings (all severity levels)
• JSON: no findings, one finding, many findings (all severity levels)
• Cross-format: date parsing verification

Documentation

Parser documentation at docs/content/supported_tools/parsers/file/orca_security.md

Checklist

• Rebased against the very latest dev
• Submitted against dev branch
• Meaningful PR name
• Code is flake8/ruff compliant
• Code is Python 3.13 compliant
• Documentation included
• No model changes, no migrations needed
• Unit tests included (7 tests)
• Deduplication configured in settings.dist.py (hashcode: title + component_name)
• Label: Import Scans (maintainer to apply if needed)

Authored by T. Walker - DefectDojo