Add static code analysis to build pipeline

Static code analysis is introduced using Splint and Flawfinder.

Pipeline steps have been moved to the beginning of the pipeline and are allowed to fail. No fail does allow the pipeline to complete with build and test steps even in case code analysis raises concerns. To address warning and failures during code analysis stage the logs of the pipeline steps have to be checked and the issues taken care of.