Set up OpenSSF Scorecard to begin tracking security metrics within the repo.

(cherry picked from commit 2fb099c)

…ocessing

Previously, we only handled Yarn and NPM lock files even though PNPM is supported as package manager.

The lock file is used to perform checks to determine if an initial execution of NGCC was already performed.

Closes #22632

(cherry picked from commit 966dd01)

Add a missing toolchain that was causing the nodejs_binary target for
ng_cli_schema to fail

(cherry picked from commit 80b2cc7)

…uild is complete

This change is inspired by karma-runner/karma-chrome-launcher#154 (comment) which blocks Karma from launching the browsers until the compilation is complete.

This is needed especially for large applications when using code-coverage where otherwise the users would have to fine-tune several Karma timeouts such as  `captureTimeout` for various environments.

Closes #22495

(cherry picked from commit 7ce5000)