setup OSSF Scorecard workflow

[mmorel-35]

Which problem is this PR solving?

• Improve OSSF Score

Description of the changes

• setup OSSF Scorecard workflow
• Pin github Actions versions
• set permissions on workflows

How was this change tested?

• CI

Checklist

• I have read https://github.com/jaegertracing/jaeger/blob/master/CONTRIBUTING_GUIDELINES.md
• I have signed all commits
• I have added unit tests for the new functionality
• I have run lint and test steps successfully
  • for jaeger: make lint test
  • for jaeger-ui: yarn lint and yarn test

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (039d8d6) 96.57% compared to head (cf3f857) 96.57%.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #2096   +/-   ##
=======================================
  Coverage   96.57%   96.57%           
=======================================
  Files         254      254           
  Lines        7620     7620           
  Branches     1986     1986           
=======================================
  Hits         7359     7359           
  Misses        261      261           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[yurishkuro]

I would also suggest manual dispatch as an option