semgrep-action doesn't consider severity, hence ignoring these rules for now.
Adds semgrep testing in CI. Refer to: - https://github.com/frappe/frappe/pull/12524 - https://github.com/frappe/frappe/pull/12577