Security pipeline and minor fixes

[AlexanderBarabanov]

What does this PR do?

This PR add security pipeline and fix some existing findings, in particular:

• dependabot.yml enables Dependabot PR with upgrades
• codeql.yml - enables CodeQL - static code analyzer
• pre_commit.yml added security pre-merge checks based on reusable actions from Anomalib repo
• scorecards.yml enables OSSF Scorecard
• security-scan.yml - added security checks based on reusable actions from Anomalib
• .pre-commit-config.yaml - added zizmor and bandit pre-commit checks
• pyproject.toml updated with Bandit config
• current workflows updated based on Zizmor findings
• README updated with prettier-ignore to pass quality checks (it started to fail, although there was not changes in PR - see https://github.com/open-edge-platform/model_api/actions/runs/15850740153/job/44683303711)

Tested on local fork.

Fixes # (issue)

Before submitting

• This PR fixes a typo or improves the docs (you can dismiss the other checks if that's the case).
• Did you make sure to update the documentation with your changes?
• Did you write any new necessary tests?

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.