Stabilize CI checks and smoke tests

[hiteshjakhar29]

Summary

• update CI workflow dependencies and security scan to improve reliability while keeping linting and tests intact
• align Makefile tooling with the CI pipeline and ensure commands use proper tabs
• modernize smoke tests to use pytest patterns and skip optional OpenCV-dependent checks to prevent spurious failures

Testing

• pytest -q

---

Codex Task