* ci: enable semgrep on v13 branches * ci: break semgrep steps for nicer output * ci: update semgrep rules inline with frappe repo
Co-authored-by: Sagar Vora <sagar@resilient.tech>