Improvements to code quality analysis in CI
This MR makes a few changes ('improvements') to the code quality analysis in the CI:
- always pass flake8, rely on the code quality report in the merge request UI
- improve parsing of requirements for flake8
- add dependency_scanning job