Improve scorecard

[minchai23]

No description provided.

[jansel]

What does this PR do? Why is it needed?

[minchai23]

What does this PR do? Why is it needed?

To improve the scorecard score of Opentuner
https://scorecard.dev/viewer/?uri=github.com/jansel/opentuner

Background:
The company has a minimum rating requirement for open-source software in use; software must have a score higher than 4 to be introduced and utilized. Therefore, we plan to increase the Scorecard rating by implementing the following measures: adding a testing pipeline, establishing security policies, setting up branch protection rules, configuring dependency bots, upgrading dependency software versions (to address vulnerabilities in dependent software), and so on.