* setup ossf scorecard and codql workflows


---------

Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
Co-authored-by: Ben Kochie <superq@gmail.com>