build(ci): use starflow for policy and security scans

build(ci): use starflow for policy and security scans #5937