Security improvements (#6890)

* Set write permissions at job level

* publish scorecard results

* Update scorecard.yml

* Update scorecard.yml

* Create .sonarcloud.properties

* Delete .deepsource.toml

* replace badge

* pin requests, pyyaml, jc

* pin yarn version

* pin uv

* reduce settings

* set test path

.sonarcloud.properties

@@ -0,0 +1,11 @@
+# Path to sources
+sonar.sources=InvenTree,src,docs
+
+# Path to tests
+sonar.tests=**/test*.py
+#sonar.test.exclusions=
+#sonar.test.inclusions=
+
+# Source encoding
+sonar.sourceEncoding=UTF-8
+sonar.python.version=3.9