chore(ci): add static-analysis checks to CI/CD

[samayer12]

Description

There are additional code quality checks we can run in CI. This PR adds some of them.

Related Issue

Fixes #1198

Type of change

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Other (security config, docs update, etc)

Checklist before merging

• Unit, Journey, E2E Tests, docs, adr added or updated as needed
• Contributor Guide Steps followed

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 85.82%. Comparing base (a52de6e) to head (36ce279).
Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1219   +/-   ##
=======================================
  Coverage   85.82%   85.82%           
=======================================
  Files          29       29           
  Lines        1411     1411           
  Branches      329      304   -25     
=======================================
  Hits         1211     1211           
- Misses        182      198   +16     
+ Partials       18        2   -16     

see 4 files with indirect coverage changes

[samayer12]

There's follow-on work for configuring SemGrep (#1245) and/or Sonarqube (#1246) that exist as separate issues.

[cmwylie19]

looks like some good enhancements, lgtm