Security pipeline update

[AlexanderBarabanov]

Summary

This PR updates security pipeline, in particular:

• security checks is implemented based on reusable actions from Anomalib repo (later we will move it to more appropriate repo like reusable-workflows) - this will simplify maintenance and support across Geti repos.
• bandit configuration moved to pyproject.toml
• .pre-commit-config.yaml - added zizmor and bandit pre-commit checks
• removed unnecessary files

Tested on local fork.

How to test

Tested in fork https://github.com/AlexanderBarabanov/datumaro/actions

Checklist

• I have added unit tests to cover my changes.​
• I have added integration tests to cover my changes.​
• I have added the description of my changes into CHANGELOG.​
• I have updated the documentation accordingly

License

• I submit my code changes under the same MIT License that covers the project.
  Feel free to contact the maintainers if that's a concern.
• I have updated the license header for each file (see an example below).

# Copyright (C) 2025 Intel Corporation
#
# SPDX-License-Identifier: MIT

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[codecov-commenter]

⚠️ Please install the to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

All modified and coverable lines are covered by tests ✅

📢 Thoughts on this report? Let us know!

[gdlg]

LGTM, thanks Alexander!