Add the [OSSF Scorecard GitHub Action](https://github.com/ossf/scorecard-action) to this repo. ## Why? Allows us to detect supply chain security for this GitHub Action. ## Actions - setup GitHub Action - add [badge](https://github.com/ossf/scorecard-action?tab=readme-ov-file#scorecard-badge) to README once wired-up