Use github actions annotations for warnings about cargo-deny-action HOT 2 OPEN

Unfortunately annotations are limited to files that actually exist in the repository the action is executed on, but there is the possibility to add a markdown file as the summary for the entire job that supports full github markdown, so adding output/graphs here seems to be the way forward.

Related: EmbarkStudios/cargo-deny#433

from cargo-deny-action.

If your PR adds a new dependency which triggers an issue, the annotation could be on the line in your Cargo.toml which adds the dependency. This isn't super helpful for transitive dependencies, nor is it all that helpful for lockfile-only updates - you could put the annotations in Cargo.lock, if present, but GitHub suppresses the diffs there by default.

from cargo-deny-action.