ci: run osv-detector

[G-Rath]

This will help ensure that our database is healthy since our config has this database loaded as a local file database

[jonholdsworth]

Forgive me, but I don't understand what this is doing?

[G-Rath]

@jonholdsworth this runs osv-detector on the codebase to check for known vulnerabilities like we do for our other codebases - a useful difference here though is that this codebase is also a source of OSV advisories which osv-detector is configured to use when running at the root of the codebase, so in addition to its standard auditing this also serves as an integration test as any invalid advisories will be rejected by osv-detector when it loads the database

[jonholdsworth]

Aha, a meta-check! 🙂