[build] Add dependency review action to CI workflow

Integrates dependency-review-action@v5 into the existing build job to
automatically review dependencies on pull requests for:
- Vulnerabilities at moderate severity or higher
- Both runtime and development scopes
- Posts summary comments on PR failures

License checking is disabled to avoid blocking on diverse license types
in the dependency tree.

Signed-off-by: Victor Rubezhny <vrubezhny@redhat.com>
Assisted-By: Claude Sonnet 4.5 <noreply@anthropic.com>

Author: vrubezhny

.github/workflows/continuous-integration-workflow.yml

@@ -24,6 +24,7 @@ jobs:
     permissions:
       contents: read
       actions: write
+      pull-requests: write
 
     strategy:
       fail-fast: false
@@ -44,6 +45,15 @@ jobs:
         with:
           node-version: ${{ matrix.node }}
 
+      - name: Dependency Review
+        if: github.event_name == 'pull_request' && runner.os == 'Linux'
+        uses: actions/dependency-review-action@v5
+        with:
+          fail-on-severity: moderate
+          fail-on-scopes: runtime, development
+          comment-summary-in-pr: on-failure
+          license-check: false
+
       # Run install dependencies
       - name: Install dependencies
         run: npm ci