ci: add OpenSSF Scorecard action

[daniel-mader]

Description of change

Periodically run OpenSSF Scorecard: "Security health metrics for Open Source".

Links to any relevant issues

n/a

How the change has been tested

n/a

Definition of Done checklist

Add an x to the boxes that are relevant to your changes.

• I have followed the contribution guidelines for this project
• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• I have added tests that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes