[P1] Run Snyk in CI to check for new vulnerabilities

[willroberts]

Once #52 and #54 are resolved, running yarn snyk will succeed, allowing us to enable it in CI (via yarn snyk). We'll need to add a token to Github Actions Secrets for this (with a snyk auth <token> step).