add fossa CI

[ruslanti]

No description provided.

[Copilot]

Pull Request Overview

This PR adds FOSSA license scanning and compliance checking to the CI/CD pipeline through a new GitHub Actions workflow.

• Introduces FOSSA CLI integration for dependency license analysis
• Configures workflow to run on push, pull requests, manual dispatch, and merge group events
• Sets up license compliance testing as part of the CI process

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[Copilot]

Downloading and executing a shell script directly from the internet without verification poses a security risk. Consider pinning to a specific version or using the official FOSSA GitHub Action instead.

Suggested change

	- name: Install FOSSA CLI
	run: |
	curl -H 'Cache-Control: no-cache' https://raw.githubusercontent.com/fossas/fossa-cli/master/install-latest.sh | bash
	- name: Set FOSSA API Key
	run: echo "FOSSA_API_KEY=${{ secrets.FOSSA_PUB_API_KEY }}" >> $GITHUB_ENV
	- name: Run FOSSA Analysis
	run: fossa analyze
	- name: Run FOSSA Test
	run: fossa test
	- name: Run FOSSA Analysis
	uses: fossas/fossa-action@v1
	with:
	api-key: ${{ secrets.FOSSA_PUB_API_KEY }}

[Copilot]

Setting the API key as an environment variable in this manner may expose it in logs. Consider using the env key at the step level or job level instead.