Add Bandit security checks to PR validation workflow

[CodeVishal-17]

What is being addressed The PR validation pipeline currently does not run any Python security scanning.

This means potential security issues in Python code may go unnoticed during pull request review.

How is this addressed

• Added Bandit security scanning to the PR validation workflow
• Configured Bandit via pyproject.toml to centralize settings
• Excluded test directories to reduce noise and false positives
• Integrated the scan into the existing build_validation_develop.yml workflow
• Verified the workflow runs successfully in a fork, as recommended No documentation or template version changes are required.
  Fixes Add bandit python code checks #4784

[marrobi]

There a a few bandit issues in the repo that will need fixing supressing before this is merged.

[CodeVishal-17]

Thanks for the feedback!
I’ve addressed the remaining Bandit findings by excluding test directories and adding targeted suppressions for intentional bindings, non-cryptographic randomness, schema placeholders, and test fixtures. This keeps the PR validation pipeline clean while ensuring Bandit remains effective for new issues.