Integrate semgrep in CI on every PR as well as CI deep

[smol-ninja]

Leaving some links here

• Running semgrep on lockup main branch
• Official website
• Custom rules for smart contract
• Uniswap v4 CI using semgrep

Benefits

• Up to date rules based on new public findings in solidity code
• Automatic checks against latest vulnerabilities in Sablier codebase through CI
• Custom rules allow filtering redundant and outdated disclosures such as using unchecked for ++i in loop

Running semgrep on v1.0.0

cc @sablier-labs/solidity

[PaulRBerg]

Seems interesting. Can't see any issue in experimenting with this.