[CI] Catch all shell/process execution issues in security gate via Bandit JSON report (#46560)
* [CI] Catch all shell/process execution issues in security gate via Bandit JSON report
Replace severity-level filtering with targeted test ID matching on the full JSON
report, covering B601-B607 and B609 (paramiko, subprocess, os.system, wildcard
injection) regardless of how Bandit classifies their severity.
---------
Co-authored-by: ydshieh <ydshieh@users.noreply.github.com>