ci: [KAN-137] add trivy scan

[lianjin]

---

name: Pull Request | 合并请求
about: 提交新功能、修复或改进 | Submit a new feature, fix, or improvement
labels: ["enhancement"]

变更内容 | Changes

add trivy scan workflow

相关 Issue | Related Issue

KAN-137 security infra

变更类型 | Type of Change

• 新功能 Feature
• 修复 Bug Fix
• 文档 Documentation
• 样式优化 Style
• 重构 Refactor
• 性能优化 Performance
• 测试 Test
• 构建/CI Build/CI
• 其他 Other

检查清单 | Checklist

• 代码已通过本地测试（含主流浏览器/终端）| Code tested locally (including major browsers/terminals)
• 相关文档已更新（如有）| Documentation updated if needed
• 代码风格符合项目规范 | Code style follows project conventions
• 变更不会影响现有功能 | Changes do not break existing features
• 已自查无敏感信息泄露 | No sensitive info is leaked

变更影响 | Impact

测试说明 | Test Instructions

其他说明 | Additional Notes

[Copilot]

Copilot wasn't able to review any files in this pull request.

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[Copilot]

Pull Request Overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 2 comments.

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[Copilot]

Pull Request Overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[Copilot]

Pull Request Overview

Copilot reviewed 3 out of 4 changed files in this pull request and generated no new comments.

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[Copilot]

Pull Request Overview

Copilot reviewed 4 out of 5 changed files in this pull request and generated 1 comment.

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}