Add Scorecard bot

[fengshunli]

What feature you'd like to add:

https://docs.sonarcloud.io/getting-started/github/

Why is this feature needed:

Integrate scorecard in CI, and display a Scorecard badge on the fluid repository

[cheyang]

@fengshunli Thank you for your suggestions. We have already integrated them into our continuous integration process, which has been helpful in addressing any code issues. We already have a significant number of badges, so we are hesitant to add more at this time.

Can you please elaborate on the reasons why you believe it is necessary to display the Scorecard badge? We would appreciate hearing more about the benefits it could bring.

[fengshunli]

The role of displaying badges is to tell developers which tools are used in the project to strengthen the security check of the project