IDScanHitFilter: Enable static thread checker

• Mark static methods and their callers as not thread-safe
• Move all headers to the private src directory
• Only build component library
• Do not call initialize/finalize of base class (this is the default)