Configure SAST in `.gitlab-ci.yml`, creating this file if it does not already exist

Mayr, Hannesrequested to merge
set-sast-config-1 into main

Exclude unittests from SAST, since it raises for example vulnerability reports for using "assert". But that is needed for unittests.

Merge request reports