ci: add dependency review action

[snitin315]

What kind of change does this PR introduce?
ci

Did you add tests for your changes?

If relevant, did you update the documentation?
No.

Summary

In case someone wants to introduce a malicious dependency through pull requests and we overlook the changed lock file

Does this PR introduce a breaking change?
No

Other information
No

[codecov]

Codecov Report

Merging #3455 (0ad3575) into next (0f7da89) will increase coverage by 20.76%.
The diff coverage is n/a.

Additional details and impacted files

@@             Coverage Diff             @@
##             next    #3455       +/-   ##
===========================================
+ Coverage   70.53%   91.30%   +20.76%     
===========================================
  Files          21       22        +1     
  Lines        1585     1587        +2     
  Branches      447      447               
===========================================
+ Hits         1118     1449      +331     
+ Misses        467      138      -329     

Impacted Files	Coverage Δ
packages/generators/addon-template/package.json.js	100.00% <0.00%> (ø)
packages/serve/src/index.ts	78.94% <0.00%> (+4.38%)	⬆️
packages/configtest/src/index.ts	96.00% <0.00%> (+12.00%)	⬆️
packages/webpack-cli/src/plugins/CLIPlugin.ts	100.00% <0.00%> (+14.54%)	⬆️
packages/webpack-cli/src/webpack-cli.ts	92.69% <0.00%> (+18.06%)	⬆️
packages/webpack-cli/src/bootstrap.ts	100.00% <0.00%> (+25.00%)	⬆️
packages/generators/src/plugin-generator.ts	100.00% <0.00%> (+28.57%)	⬆️
packages/generators/src/utils/scaffold-utils.ts	100.00% <0.00%> (+37.50%)	⬆️
packages/generators/src/loader-generator.ts	91.66% <0.00%> (+41.66%)	⬆️
packages/generators/src/index.ts	86.36% <0.00%> (+43.18%)	⬆️
... and 3 more

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 0f7da89...0ad3575. Read the comment docs.