* chore(security): add Scorecard workflow for supply-chain security * chore: ignore prettier on .github