fix(policies): improve sensitive data check

[elsapet]

Description

Avoid checking for sensitive data for each risk

This is an improvement on the current code but ideally we would do this once per scan... wondering if there's a clean / rego way to do this 🤔

Checklist

• I've added test coverage that shows my fix or feature works as expected.
• I've updated or added documentation if required.
• I've included usage information in the description if CLI behavior was updated or added.
• PR title follows Conventional Commits format