fix: async subprocess + httpx — no more event loop blocking during scans

guarddog_nexus/harvester.py

@@ -66,7 +66,7 @@ async def harvest(
         scan.status = ScanStatus.SCANNING.value
         await session.commit()
 
-        downloaded = download_asset(download_url, tmpdir)
+        downloaded = await download_asset(download_url, tmpdir)
         if not downloaded:
             scan.status = ScanStatus.FAILED.value
             scan.error_message = "Download failed"
@@ -78,7 +78,7 @@ async def harvest(
         await session.commit()
 
         log.info("Scanning %s==%s", package_name, package_version)
-        result = scan_package(downloaded, ecosystem)
+        result = await scan_package(downloaded, ecosystem)
 
         findings_list = result.get("findings", [])