Add dependency review check

[fredvisser]

Pull Request

🤨 Rationale

#801 highlighted that our current use of npm audit is brittle. This action should elevate any issues tracked by Github to the PR.

👩‍💻 Implementation

• Use the example config file from https://github.com/actions/dependency-review-action?tab=readme-ov-file
• I'll remove the Snyk integration when this PR goes in

🧪 Testing

This PR only highlights the packages that are changed (the Github Actions), but since the Github dependency graph sees our other NPM dependencies, I expect this will evaluate package.json issues when a PR has those changes in it.

I could add known bad issues to this PR to validate, or we could just submit this and validate over time.

✅ Checklist

• I have updated the project documentation to reflect my changes or determined no changes are needed.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues found.

Scanned Manifest Files

.github/workflows/dependency-review.yml

• actions/checkout@4.*.*
• actions/dependency-review-action@4.*.*