Fix #1980: Centralize output format definitions and sync run command with print-safe formats

[gyanranjanpanda]

Fixes #1980 by removing duplicated output format definitions and introducing a single source of truth for supported formats.

The run command previously relied on a hardcoded list of formats, which could fall out of sync when new formats (e.g. ort-package-list) were added to the output command. Since run internally uses stdout streaming (--print), it must restrict formats to those compatible with streaming (excluding csv and xlsx).

This PR centralizes format definitions and ensures both commands remain synchronized while preserving the safety constraints of the run command.

---

Changes

• Added canonical constants in scanpipe/pipes/output.py:

  • SUPPORTED_FORMATS — all formats supported by the output command

  • PRINT_SUPPORTED_FORMATS — subset compatible with stdout streaming

• Updated scanpipe/management/commands/output.py to import SUPPORTED_FORMATS.

• Updated scanpipe/management/commands/run.py to use PRINT_SUPPORTED_FORMATS instead of a hardcoded list.

• Added regression tests to ensure:

  • Format lists stay synchronized

  • PRINT_SUPPORTED_FORMATS remains a strict subset of SUPPORTED_FORMATS

  • Incompatible formats are rejected early by argparse

---

Behavior

Command | Before | After

Behavior

## Behavior

Command	Before	After
run --format spdx	✅ Worked	✅ Works
run --format cyclonedx	✅ Worked	✅ Works
run --format ort-package-list	❌ Could fall out of sync	✅ Works
run --format csv	⚠️ Could crash (not print-safe)	❌ Rejected early
run --format xlsx	⚠️ Could crash (binary)	❌ Rejected early
output --format csv	✅ Worked	✅ Works
output --format xlsx	✅ Worked	✅ Works

---

Result

• run automatically supports newly added print-compatible formats.

• Incompatible formats are safely rejected before execution.

• Eliminates duplicated configuration and prevents future drift between commands.

• No behavioral regressions.

[gyanranjanpanda]

Hi,@aryansinha could u review this