Add comprehensive security scanning workflows for Python

[lukeina2z]

This commit implements complete security scanning for aws-xray-sdk-python:

CodeQL Security Analysis (.github/workflows/codeql-analysis.yml)

• CodeQL analysis for Python code security scanning with security-extended queries
• Safety for Python dependency vulnerability scanning using PyUp.io database
• pip-audit for comprehensive Python package vulnerability detection
• Bandit for Python-specific security linting and vulnerability detection
• Semgrep for pattern-based security analysis
• Pylint with security-focused extensions for static code analysis
• mypy for type safety checking (security-relevant)
• Runs on PR/push and weekly schedule

Daily Security Scan (.github/workflows/daily-scan.yml)

• Scans published PyPI package twice daily
• Downloads and analyzes actual published package from PyPI registry
• Monitors both source distributions and wheels
• Detects new vulnerabilities in existing published packages
• Comprehensive current dependency scanning with multiple tools
• Generates detailed summary reports with vulnerability counts
• Tracks dependency trees and package relationships

Key Features

• Comprehensive coverage: source code, dependencies, published PyPI packages
• Python-focused: Safety, pip-audit, Bandit, Semgrep, Pylint, mypy
• Security-focused: commit hashes, proper permissions, categorized results
• Production-ready: scans actual published packages from PyPI registry
• Robust: proper timeouts, error handling, and comprehensive reporting
• Multi-tool approach: combines 6 different security scanners for maximum coverage
• Actionable: clear reporting and GitHub Security tab integration

Already detected security issues including hardcoded temp directory usage (B108).

Addresses the critical security gap where aws-xray-sdk-python had no automated security scanning despite being critical infrastructure used in production.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.