Remove security checks from static analysis and add sast job

What does this MR do?

Removes security checks from static analysis and add sast job

Are there points in the code the reviewer needs to double check?

no

Why was this MR needed?

So we can use and improve our SAST feature. It will show security warnings in the merge request widget.

Screenshots (if relevant)

no