Add Trivy and/or Grype scanning

[vredchenko]

trivy-workspace-scan-report.txt
grype-workspace-scan-report.txt

Research and evaluate:

• https://github.com/aquasecurity/trivy
• https://github.com/anchore/grype

compare and add one or both as:

• Github CI security scans against container images and repositories
• optional local dev dependencies in smartem-workspace tool,
• wrappers in scripts if useful
• expose as skills to Claude Code