feat(ci): enable Semgrep

[AlexanderBarabanov]

What does this PR do?

This PR enables Semgrep scan on PR and push with the following rules:

• p/default
• p/cwe-top-25
• p/trailofbits
• p/owasp-top-ten

and migrates to shared actions from geti-ci repo.
Contribution guidance updated with Suppressing False Positives section.

Fixes # (issue)

Before submitting

• This PR fixes a typo or improves the docs (you can dismiss the other checks if that's the case).
• Did you make sure to update the documentation with your changes?
• Did you write any new necessary tests?