Dify #38524: add Pysa security checks

Job description

Source issue: https://github.com/langgenius/dify/issues/38524 Repo: https://github.com/langgenius/dify Task: Implement a clean proposal and code change for adding Pysa based security/static analysis checks to Dify. Review the linked issue, inspect the current CI/check setup, and submit a focused PR or patch plan that fits the repo. Deliverables: Investigate how Pysa should be integrated into the repo. Implement or prototype the check in the appropriate CI/dev workflow. Document how to run it locally or in CI. Share the exact files changed and any caveats. Acceptance criteria: The solution clearly addresses issue 38524. The change is scoped, reproducible, and aligned with the existing repo tooling. Include links or commit references for the work product. Please mention issue 38524 in your application and explain your proposed implementation approach.