Security review and pipeline

[nkcoder]

Summary

Add trivy security scan config to pipeline.

Type of Change

• [] Bug fix (non-breaking change fixing an issue)
• New feature (non-breaking change adding functionality)
• Breaking change (fix or feature causing existing functionality to not work as expected)
• Refactoring (no functional changes)
• Documentation update

Changes Made

• Add .dockerignore to ignore secrects
• Add trivy to CI pipeline

Checklist

• Code follows project style guidelines
• Self-review completed
• Tests added for new functionality
• Documentation updated (if needed)

Reviewer Notes

N/A