Add CodeQL and Bandit Static Analysis Scans

[kkraus14]

Description

Resolves #534

Adds scans using both CodeQL and Bandit. Could use some discussion on what level of reporting we wish to have here and when we want to error. I have updated the repo settings to alert on any Security alert severity level and set the Standard alert severity level to "Errors and warnings" as a starting point.

Checklist

• [ ] New or existing tests cover these changes.
• [ ] The documentation is up to date with these changes.