ci: make dependency review advisory

Signed-off-by: Moritz Johner <beller.moritz@googlemail.com>

.github/workflows/dependency-review.yml

@@ -30,3 +30,4 @@ jobs:
         with:
           fail-on-severity: high
           show-openssf-scorecard: false
+          warn-only: true