[SINT-3008] feat(github-action): add support for 'verify' command

[bthuilot]

Changes

• Add GitHub action support for verify command
  • Accepts a workflow YAML file
  • Parses all 3rd party (non-relative path) actions and their versions
  • Performs a scan for each action + version combination

Testing

Verify action

.github/workflow/test.yaml

> poetry run guarddog github_action verify .github/workflows/test.yml
INFO: Scanning using at most 16 parallel worker threads

Found 0 potentially malicious indicators scanning actions/setup-python version v5

Found 0 potentially malicious indicators scanning actions/checkout version v4

Found 0 potentially malicious indicators scanning docker/setup-qemu-action version v3

Found 0 potentially malicious indicators scanning docker/setup-buildx-action version v3

Found 0 potentially malicious indicators scanning docker/build-push-action version v5