fix: prevent incomplete OWASP cache after timeout

[mmilk23]

Adjusts the OWASP Dependency-Check workflow after observing the initial NVD download exceed the 20-minute timeout.

Changes:

• increases job timeout from 20 to 60 minutes for the initial NVD bootstrap;
• moves the Dependency-Check cache namespace to v2, avoiding reuse of the incomplete cache saved by the timed-out run;
• saves Dependency-Check data only when the preceding analysis completes successfully, preventing partial/corrupt NVD data from becoming the weekly cache.

Once a complete weekly cache exists, pull-request runs can reuse it with autoUpdate=false and should be substantially faster.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.