cicd: make optional jobs manual

Unlike e2e and unit tests, these jobs are much less frequently used. Instead of having them running on every commit, we can simply manually run them from time to time (for instance, when we routinely update packages). This will save us time and (a lot of) money.

Summary by CodeRabbit

• Chores
  • Updated CI pipeline to require manual intervention for code quality, container scanning, nodejs-scan-sast, secret detection, and semgrep-sast stages.