chore: security workflow (gitleaks, pip-audit, npm audit, trivy)

chore: security workflow (gitleaks, pip-audit, npm audit, trivy) #20