build: add built-from-source github action for semgrep

[art1f1c3R]

Summary

This PR adds support for building Semgrep from source and including it as a Macaron dependency.

Description of changes

This PR introduces a new manually-triggered GitHub action that clones the Semgrep GitHub repository for version 1.113.0 and builds the software as a python wheel package from source using the repository's supplied Docker file. This includes building from source the required OCaml binaries that are part of the package. This action publishes a minimal docker image under the name macaron-deps that only holds that build-from-source semgrep wheel with the name semgrep_wheel.whl in the top-level directory. The intention is for this artifact to be used in the final docker build in Dockerfile.final to copy the Semgrep wheel out into the Macaron image and install it.

Checklist

• I have reviewed the contribution guide.
• My PR title and commits follow the Conventional Commits convention.
• My commits include the "Signed-off-by" line.
• I have signed my commits following the instructions provided by GitHub. Note that we run GitHub's commit verification tool to check the commit signatures. A green verified label should appear next to all of your commits on GitHub.
• I have updated the relevant documentation, if applicable.
• I have tested my changes and verified they work as expected.