Fix bruteforce validators to accept nil

bruteforce_speed isn't always required, because the speed checker already handles nil (and presumes the user wants the fastest possible).

The included specs now create an actually valid base scanner class, and tests the nil case.

See also MSP-11842

## Verification

 - [ ] Specs pass