Add openssf scorecard

[nitrocode]

why

This scorecard helps a lot on improving repository security integrity.

These values are also exposed to renovatebot PRs if OpenSSF is enabled

references

• main repo https://github.com/ossf/scorecard
• https://securityscorecards.dev/#how-it-works
• example for this project https://scorecard.dev/viewer/?uri=github.com/hashicorp/setup-terraform
• action https://github.com/ossf/scorecard-action