Add security workflows: pre-commit hooks, dependency review

Author: rahuldevikar761

.github/workflows/codeql.yml

@@ -21,4 +21,4 @@ jobs:
         with:
           fail-on-severity: high
           comment-summary-in-pr: always
-          deny-licenses: GPL-3.0, AGPL-3.0
+          deny-licenses: GPL-3.0-only, AGPL-3.0-only

.github/workflows/dependency-review.yml

@@ -25,21 +25,11 @@ repos:
       - id: check-toml
       - id: check-ast
 
-  # Python specific
-  - repo: https://github.com/psf/black
-    rev: 24.4.2
+  # Python specific - using Ruff (matches CI settings)
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.4.4
     hooks:
-      - id: black
-        language_version: python3
-
-  - repo: https://github.com/pycqa/isort
-    rev: 5.13.2
-    hooks:
-      - id: isort
-        args: ["--profile", "black"]
-
-  - repo: https://github.com/pycqa/flake8
-    rev: 7.0.0
-    hooks:
-      - id: flake8
-        args: [--max-line-length=120]
+      - id: ruff
+        args: [--fix, --line-length=100]
+      - id: ruff-format
+        args: [--line-length=100]