Import qualified scanner.scan inside cli.scan entrypoint

It makes cli more testable and helps avoid ambiguity between uses of 'scan' and
'scanner' for the reader.