* Keep an admintools version separate from temporal version.
This allows us to account for new admintools tagging format.
* Adjust release action to take an admintools version.
## What was changed
Add Github workflow to scan PRs with Semgrep.
## Why?
This will eventually be an org-wide required workflow, but Github won't let us have access to it yet, so this PR manually adds scanning.
## Checklist
How was this tested:
Added manually in this way to many other repos with no issue.
