build(ci): use starflow for policy and security scans

build(ci): use starflow for policy and security scans #4995