Fix Zizmor Issues: Revert "Ci/simplify workflows (#66)"

[roshan-ku]

This reverts commit 78d26b9.

Description

StepSecurity false positive, not a GitHub Actions error.

uses: $/.github/actions/analysis/coverity is the new GitHub self-repository syntax. GitHub resolves it to the exact commit currently running, so it is inherently pinned. It requires runner 2.336.0+.

StepSecurity has not recognized $/... yet and incorrectly classifies it as an unpinned third-party action. Do not add @sha; that would defeat the self-repository syntax and may be invalid.

Recommended action: keep the $/... references and suppress or ignore this StepSecurity finding until StepSecurity adds support. Reverting to ./... would satisfy StepSecurity but reintroduce the zizmor findings.

Checklist

Code Quality

• Code follows project style guidelines
• No unnecessary debug logs or commented-out code
• No hardcoded values / secrets

Testing

• Unit test added/modified accordingly
• Perform manual basic sanity testing at system level

Review Readiness

• PR title and description are clear and meaningful
• Story/Task IDs are linked

Documentation

• README or relevant docs updated (if applicable)

Security

• No sensitive data exposed (keys, passwords, tokens)
• Input validation added where needed

PR Type

What kind of change does this PR introduce?

• Bugfix
• Feature
• Code style update (formatting, local variables)
• Refactoring (no functional changes, no api changes)
• Documentation content changes
• Testing
• Other... Please describe:

[dmkarthi]

LGTM