Add SSDLC and SBOM Actions

[diox]

Part of https://mozilla-hub.atlassian.net/browse/AMOENG-2638 and https://mozilla-hub.atlassian.net/browse/AMOENG-2637

Since the SSDLC action includes zizmor I've removed our own integration.

[github-advanced-security]

You are seeing this message because GitHub Code Scanning has recently been set up for this repository, or this pull request contains the workflow file for the Code Scanning tool.

What Enabling Code Scanning Means:

• The 'Security' tab will display more code scanning analysis results (e.g., for the default branch).
• Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results.
• You will be able to see the analysis results for the pull request's branch on this overview once the scans have completed and the checks have passed.

For more information about GitHub Code Scanning, check out the documentation.

[nothingrandom]

Some queries, but otherwise fine

[nothingrandom]

Is this going to cause a bunch of future issues in the future when we update a file? Is there a way to see any outstanding issues with existing code?

[diox]

We should already pass the checks (this can be seen by looking at the logs for each check in that PR) but once it's merged it will also appear in the security tab for the repos.

[diox]

Actually I spoke too soon, semgrep finds some errors. I'll fix them in a separate PR before merging this.