Improvements to code quality analysis in CI

This MR makes a few changes ('improvements') to the code quality analysis in the CI:

• always pass flake8, rely on the code quality report in the merge request UI
• improve parsing of requirements for flake8
• add dependency_scanning job