Add CI workflow

As Platform Enginner, I want to have a CI workflow for this repository
When a contributor opens a PR
And CI must check if commit is signed
And Composition Analysis must be run
And secret scanning must not detect any issue