Add step security config

[pdabelf5]

Proposed changes

• pin actions to commit sha's
• ensure dependabot can update actions
• add dependency review workflow
• add codeql workflow
• add scorecard checks

https://app.stepsecurity.io/securerepo?repo=https://github.com/nginx/agent

Checklist

Before creating a PR, run through this checklist and mark each as complete.

• I have read the CONTRIBUTING document
• I have run make install-tools and have attached any dependency changes to this pull request
• If applicable, I have added tests that prove my fix is effective or that my feature works
• If applicable, I have checked that any relevant tests pass after adding my changes
• If applicable, I have updated any relevant documentation (README.md)
• If applicable, I have tested my cross-platform changes on Ubuntu 22, Redhat 8, SUSE 15 and FreeBSD 13

[netlify]

✅ Deploy Preview for agent-public-docs canceled.

Name	Link
🔨 Latest commit	0a851a7
🔍 Latest deploy log	https://app.netlify.com/sites/agent-public-docs/deploys/66336f563b9b5f00087eddef

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.