Set up automated dependency scanning after the recent npm/PyPI supply chain attacks

With everything that's happened recently, the Axios npm account hijack, LiteLLM getting poisoned on PyPI, and that coordinated npm/PyPI/Docker Hub campaign in April, I finally stopped manually running npm audit and set up something proper. Been running Dependency-Track for a few weeks now. It's an