Create scorecard.yml for OSSF implementation

[jkowall]

Add OSSF Scorecards

Which problem is this PR solving?

• Part of security slam work to correct issues. This will add the GH Action to run code scanning which will ultimately replace the deprecated scanning we use today.

Description of the changes

• Add GitHub Action

How was this change tested?

• Cannot test this until merged

Checklist

• I have read https://github.com/jaegertracing/jaeger/blob/master/CONTRIBUTING_GUIDELINES.md
• I have signed all commits
• [Not Needed] I have added unit tests for the new functionality
• I have run lint and test steps successfully
  • for jaeger: make lint test
  • for jaeger-ui: yarn lint and yarn test

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

📢 Thoughts on this report? Let us know!.