Adding nightly and PR trivy scans

[jmfiola]

Automated Trivy Security Scans

This PR adds automated Trivy scans to every pull request targeting main and sets up a nightly job that runs the same scan directly against the main branch.

---

 Key Changes

Workflow	Frequency	Behaviour
Pull Request	Every PR to main	Fails if any HIGH or CRITICAL vulnerabilities, or secrets are detected.
Nightly (main)	Daily ‑ 03:00 UTC	Runs on main; when the scan fails on HIGH or CRITICAL findings, the workflow opens  or re‑uses  a GitHub issue. Example: Issue #13.

---

Type of Change

New feature – adds preventive security gates and continuous monitoring.

---

Validation & Testing

Pull‑Request Pipeline

• Tested with branches containing known HIGH/CRITICAL findings → workflow failed as expected.
• Tested with a clean branch → workflow passed.

Nightly Workflow

• Temporarily removed branch/schedule guard to trigger issue‑creation logic.
• Confirmed:
  • A single issue is opened on first failure.
  • Subsequent failures detect the open issue and do not create duplicates.

[thathaneydude]

Nice job! Let's let it soak over the weekend and if all goes well we can implement it across all the repos 👍

[HassanBaker]

Looks great! I agree with Ryan, this would be better off in a standalone workflows repo so we can import it into the other projects as well

[HassanBaker]

Great work!