PVF worker: Add CI job to check syscall lists

[mrcnski]

Background

In order to sandbox the PVF workers, we want to use seccomp to block all unneeded syscalls. We can get the list of syscalls used by the processes with the list-syscalls.rb script. However, we need a CI job to keep this list up to date.

Requirements

1. Add to the repo the list of syscalls detected by list-syscalls.rb.
   1. Let's call the lists prepare-worker-syscalls and execute-worker-syscalls.
2. Add a CI job that:
   1. Builds the workers with LTO (production profile) and musl: SKIP_WASM_BUILD=1 cargo build --profile production --target x86_64-unknown-linux-musl --bin polkadot-execute-worker --bin polkadot-prepare-worker.
   2. Runs list-syscalls.rb on both workers and compares the output to prepare-worker-syscalls and execute-worker-syscalls.
   3. Any changes should be reviewed manually. (I don't expect changes to occur often.)