clang-SA warnings should cause CI failure

[eqvinox]

Example of CI run with static analyzer warnings that resulted in PASS:

FRRouting/frr#10074 (comment)
https://ci1.netdef.org/browse/FRR-PULLREQ2-1600/

⇒ need to switch clang-SA to hard fail.