[ZohebShaikh]

Adds the same Trivy scan blueapi uses:

• _trivy.yml: builds the image and fails on fixable CRITICAL/HIGH OS and library vulnerabilities
• ci.yml: runs the scan on every push/PR
• periodic.yml: runs it weekly (Wed 08:00 UTC) and on manual dispatch, to catch new CVEs in the base image

🤖 Generated with Claude Code

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.79%. Comparing base (2f8ead1) to head (6fa18e7).

Additional details and impacted files

@@           Coverage Diff           @@
##             main      #36   +/-   ##
=======================================
  Coverage   95.79%   95.79%           
=======================================
  Files           5        5           
  Lines         857      857           
=======================================
  Hits          821      821           
  Misses         36       36           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[ZohebShaikh]

I'm planning to add it here so that we can scan the image. And get updates here.
The sad part of adding it here is that we will have no control over updating the vulners because they will be most likely coming from tiled