Fix Static Application Security Testing workflow path configuration

[m-marinucci]

Problem

The Static Application Security Testing workflow introduced in PR #89 is failing due to incorrect path configuration.

Error Details

The workflow fails with:

• "Process completed with exit code 1" during the build/analysis phase
• "No files were found with the provided path: tol-master/tol/build-clang-analysis/static-analysis-results/"

Root Cause

The workflow expects analysis results in tol-master/tol/build-clang-analysis/static-analysis-results/ but the actual build structure doesn't match this path.

Proposed Fix

1. Update the workflow to use the correct build directory structure
2. Ensure the static analysis tools generate output in the expected location
3. Add validation that the analysis results directory exists before trying to upload artifacts

Related

• Introduced in PR feat: Critical fixes and infrastructure improvements #89
• Workflow file: .github/workflows/security.yml

Priority

High - This blocks our security scanning capabilities