refactor: run security on package.json changes

Author: jsjoeio

.github/workflows/security.yaml

@@ -4,8 +4,8 @@ on:
   push:
     branches: [main]
   pull_request:
-    # The branches below must be a subset of the branches above
-    branches: [main]
+    paths:
+      - "package.json"
   schedule:
     # Runs every Monday morning PST
     - cron: "17 15 * * 1"