Gitlab CI: start scanning dependencies

What does this MR do?

Enables dependency scanning built into Gitlab

How confident are you it won't break things if deployed?

Just CI, which will be obvious if broken :)

How to test

• Look at CI, I guess :D

Checklist

• no code change, no test
• no unrelated changes
• asked someone for a code review
• set a "for:" label to indicate who will be affected by this change
• used "state:" labels to track this MR's state until it was beta tested
• added an entry to CHANGELOG.md
• added a short text that can be used in the release notes
• Once your MR has been merged, you are responsible to create a testing issue in the Beta Testing forum: https://foodsharing.de/?page=bezirk&bid=734&sub=forum
  • Consider writing a detailed description in German.
  • Describe in a few sentences, what should be tested from a user perspective.
  • Also mention different settings (e.g. different browsers, roles, ...) how this change can be tested.
  • Be aware, that also non technical people should understand.

Release notes text in German

< dev only change, no release notes >