Security vulnerability scanning of java dependencies

[jframe]

Add security vulnerability scanning of Java dependencies as part of the regular build. Currently Besu does use Trivy and CodeQL for scanning for security vulnerabilities. This doesn't find all vulnerabilities as different tools use different security vulnerability databases.

Intention is to use https://jeremylong.github.io/DependencyCheck/dependency-check-gradle/index.html so this can happen as part of the regular build and catch any security vulnerabilities before reaching the main branch.

Tasks

• Discuss in next contributors call - Tuesday 21st
• Trial without blocking the build - avoid red cross!