feat(compliance): add CWEs verification for sast analysis (#2793)

Signed-off-by: Victoria <kaysa.vps@gmail.com>
Signed-off-by: kaysavps <49433866+kaysavps@users.noreply.github.com>

Author: kaysavps

.github/workflows/contracts/chainloop-vault-codeql.yaml

@@ -17,8 +17,11 @@ spec:
         with:
           check_signature: yes
           check_author_verified: yes
+    materials:
+      - ref: owasp-top10-2025
   policyGroups:
     - ref: slsa-checks
       with:
         runner: GITHUB_ACTION
     - ref: sast
+    - ref: cwes