Adds ClamAV and sets the default checking method to on server executable.

govCMS has a requirement on clamav - adding this PR here as a potential addition to aGov for due diligence. Happy to delegate this across to govCMS if PNX prefer :snake: