Aggregate static analysis with semgrep

[TonyCTHsu]

What does this PR do?

1. Include semgrep in the static analysis flow
2. Update image (returntocorp/semgrep -> semgrep/semgrep)
3. Update ubuntu 24
4. Split linter

Change log entry
None

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 97.73%. Comparing base (258f0db) to head (ef05e07).

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #4329   +/-   ##
=======================================
  Coverage   97.73%   97.73%           
=======================================
  Files        1368     1368           
  Lines       82997    82997           
  Branches     4219     4219           
=======================================
  Hits        81113    81113           
  Misses       1884     1884           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.