Generating SBOM and signing docker images

[JGiola]

Pull Request Type

• Bugfix
• Feature
• Code style update (formatting, local variables)
• Refactoring (no functional changes, no api changes)
• Build related changes
• CI related changes
• Documentation content changes
• Other... Please describe:

Description

This PR is mainly focused on changing the docker image release process to add the generation of a SPDX SBOM file in json format and attach it to the tagged images via cosign and it will also add the sign of those images using the Mia-Platform public key.

In adding this new functions it will also add:

• pinning all actions to their sha for a better security posture against supply chain attack and for preparing the generation of build attestation in the future
• add a devcontainer configuration to allow people to run them locally or use it for codespaces
• update dependabot with actions and devcontainer configuration
• add a new dependency review action
• pinned docker layers inside Dockerfile for better security posture against supply chain attacks
• remove LABEL directive that is superseded via the meta step in the release process
• move the security check via sysdig from an internal pipeline to the official action
• update npm dependencies to the latest minor and patch releases

PR Checklist

• The commit message follows our guidelines included in the CONTRIBUTING.md
• Tests for the changes have been added (for bug fixes / features)
• Relevant CHANGELOG is updated

Does this PR introduce a breaking change?

• Yes
• No

Other information

[coveralls]

Pull Request Test Coverage Report for Build 11550388270

Details

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 83.956%

---

Totals
Change from base Build 11499676684:	0.0%
Covered Lines:	520
Relevant Lines:	592

---

💛 - Coveralls