feat: semgrep rules and check for reinitializer modifiers

[smartcontracts]

Adds semgrep rules and a new golang contracts check for reinitializer modifiers. Important safety checks now that we are using upgrade functions.

[codecov]

Codecov Report

Attention: Patch coverage is 72.36842% with 21 lines in your changes missing coverage. Please review.

Project coverage is 46.49%. Comparing base (f45e785) to head (d5e28ee).
Report is 1 commits behind head on develop.

Files with missing lines	Patch %	Lines
...racts-bedrock/scripts/checks/reinitializer/main.go	72.36%	20 Missing and 1 partial ⚠️

Additional details and impacted files

@@             Coverage Diff             @@
##           develop   #14534      +/-   ##
===========================================
- Coverage    46.60%   46.49%   -0.12%     
===========================================
  Files         1033     1034       +1     
  Lines        88579    88655      +76     
===========================================
- Hits         41281    41218      -63     
- Misses       44210    44359     +149     
+ Partials      3088     3078      -10     

Flag	Coverage Δ
cannon-go-tests-32	61.92% <ø> (-2.02%)	⬇️
cannon-go-tests-64	56.56% <ø> (-1.65%)	⬇️
contracts-bedrock-tests	94.58% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

Files with missing lines	Coverage Δ
op-chain-ops/solc/types.go	12.50% <ø> (ø)
...racts-bedrock/scripts/checks/reinitializer/main.go	72.36% <72.36%> (ø)

... and 16 files with indirect coverage changes