Test for vulnerabilities in Java dependencies with Snyk

[aaronweissler]

Still needs an environment snyk with a Snyk Auth-Token set as secret SNYK_AUTH.

When setting that up, we can also set up checking individual PRs for new vulnerabilities.

---

This change is