Add CI Check for CVEs in Newly Added Maven Dependencies

[imjalpreet]

Description

To improve Presto’s security posture, we should add an automated CI step that scans only newly introduced Maven dependencies in pull requests for known CVEs, and we could prevent merges if high-severity vulnerabilities are detected.

Motivation

• Prevent introducing dependencies with known security vulnerabilities into the codebase.
• Provide fast feedback to contributors before code is merged.

Use the OWASP Dependency-Check Maven plugin (or similar tool).

[wanglinsong]

If we use OWASP, the developers need to update the pom.xml.