code-review: add supply chain security checks for dependency changes (avoid future litellm supply-chain incidents) https://github.com/OpenHands/extensions/pull/226