docs(security-analysis): document OSV-Scanner as merge_group dependency-CVE check (#168)

docs(security-analysis): document OSV-Scanner as merge_group dependency-CVE check (#168) #387