Add cargo-deny to check dependencies for vulnerabilities, license
violations, and banned crates. Runs as a step in branch-checks for PRs
and as a separate scheduled workflow for daily advisory scanning.
Signed-off-by: Ignas Baranauskas <ibaranau@redhat.com>