CI dependency scanning

[filippocrotti12]

CI already has linting and test but misses CVE scan on go and npm dependencies.

Fix: add to .github/workflows/security.yml:

• govulncheck ./... for go modules
• pnpm audit --audit-level=high for node.js