chore: upgrade CI tooling and add CVE Lite scan