feat: add Socket Security supply chain scanning

[isanchez31]

Summary

• Add Socket Security GitHub Action workflow (.github/workflows/socket-security.yml) that runs on pull requests to scan dependencies for supply chain risks including malicious packages, typosquatting, and hidden install scripts
• Add socket.yml configuration with strict issue rules tuned for a security project: network access, shell access, environment variable access, filesystem access, eval usage, malware detection, obfuscated code, and more
• Note: For full functionality (PR comments, dependency overview, project reports), the Socket Security GitHub App should also be installed on the repository

Test plan

• Verify the workflow triggers on a pull request to main
• Confirm Socket Security action runs successfully and reports dependency issues
• Validate socket.yml configuration is recognized by the Socket GitHub App once installed
• Check that PR alerts and dependency overview comments appear as configured

🤖 Generated with Claude Code