Add OSV dependency vulnerability scanning GitHub Action

[christian-kreuzberger-dtx]

Adds OSV dependency vulnerability scanning via GitHub Actions.

This workflow:

• Runs on push & PR to main, plus a weekly scheduled scan (Mondays 03:00 UTC)
• Uses the official OSV Scanner Action to detect known vulnerabilities: https://google.github.io/osv-scanner/github-action/
• Converts results to SARIF and uploads them to GitHub Code Scanning (visible under Security → Code scanning alerts)
• Complements existing Snyk scanning for broader coverage (different advisory sources)

References:

• OSV Scanner Action docs: https://google.github.io/osv-scanner/github-action
• OSV vulnerability database: https://osv.dev

[MrManny]

250728_161417_581_3046_64.mp4

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[christian-kreuzberger-dtx]

I think we should configure the Workflow to not fail the build. It reports two findings, and we can't fix any of them right now...