Add Ensignia workflow

[ensignia-security-development]

This Pull Request introduces the Ensignia Security Workflow into your repository, aiming to significantly bolster its security framework. The key features and implications of this integration are outlined below:

Workflow Operations

• Initial Baseline: The workflow creates an initial baseline of the repository's packages, which is used to detect any future changes.
• Vulnerability Scanning: It meticulously examines any new direct or transient dependencies introduced, identifying known vulnerabilities that could compromise repository integrity.
• Scorecard: It creates a security scorecard for the repository, which is used to track its security posture over time.

Opting Out

• No Obligation to Merge: The adoption of Ensignia is entirely at your discretion. If you decide against incorporating Ensignia into this repository, you can opt out by simply closing this PR.

Your feedback and queries are welcome; we're here to assist with the integration process or to provide further information about the benefits and operations of Ensignia.