add CI tooling to detect security bugs. closes https://github.com/official-stockfish/Stockfish/pull/4659 No functional change