terraform-pipeline.yml: document Trivy ignore rules

We currently ignore a list of Trivy checks by default. This is due to the fact that they directly contradict how our gcp-deploy-boilerplate is configured. We should document what each of these excluded rules are and why we deem it acceptable to exclude them.