Add a security check based on FriendsOfPHP/security-advisories

[Flyingmana]

Description (*)

If OpenMage makes use of a composer dependency, which is noted as vulnerable via https://github.com/FriendsOfPHP/security-advisories, we should get a notice.

I dont think we need the check on every PullRequest, but at least a weekly check on our main branches would be good. and on Releases (and manual triggering)
There also is an own github action for this. https://github.com/marketplace/actions/the-php-security-checker

Expected behavior (*)

Benefits

Additional information