* Re-work logic for npm audit options variable checks

* Add separate echo statements instead of newlines, which is apparently how this must be done in gitlab ci console output :/
* Add support for WM_APPSEC_NPM_AUDIT_OPTION variable to override default secteam npm audit options

* Try different approach to echo newlines (may not work)
* Add review msg if at least one vulnerable package.json exists

* Remove user commands as those aren't supported here, apparently (https://gitlab.com/gitlab-org/gitlab-runner/-/issues/2750)

* Add user root/nobody in before_script directive for better permissions control