Add dependency-submission workflow to collect gradle dependencies

[ostinru]

Gradle Dependency Submission for cloudberry-pxf

GitHub can collect[1] gradle dependencies on its own. However It fails to collect it when build.gradle is located in the nested directory.

Adding new github-action workflow that mimics what github doing automatically[2].

[1] https://github.blog/changelog/2025-05-27-dependency-auto-submission-now-supports-gradle/
[2] https://docs.github.com/en/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies/configuring-automatic-dependency-submission-for-your-repository#gradle-projects

[ostinru]

Hi! This PR is intended to collect gradle dependencies and show vulnerable ones in Security section of this repository. It increases amount of dependencies from ~100 to ~400.

Note: this workflow requires write permission, so it is triggered only on push to master.

[tuhaihe]

Hi @MisterRaindrop @Mulily0513 could you help review this PR? Thanks!

[MisterRaindrop]

LGTM