chore: Add dependency-review workflow that always targets main (#2645)

### Proposed Changes

The `base-ref` for dependency review is typically the target branch
you're merging into. This results in dependency-review alerting on any
changed dependencies which may have CVE's. By using `orign/main` as our
`base-ref`, we are now also validating that the target branch has
adopted all necessary security updates that were adopted within the
`main` branch. This will help ensure `release` branches have adopted all
necessary security fixes.

### Checklist

- [ ] I have added or updated unit tests
- [ ] I have added or updated integration tests (if appropriate)
- [ ] I have added or updated documentation

### Testing Instructions

Author: jentfoo

.github/workflows/main-dependency-review.yaml

@@ -0,0 +1,14 @@
+name: 'Main Branch Dependency Review'
+on:
+  pull_request: {}
+
+jobs:
+  main-dependency-review:
+    permissions:
+      contents: read
+      pull-requests: write
+
+    uses: ./.github/workflows/dependency-review.yaml
+    with:
+      base-ref: main
+      fail-on-severity: low