Add Cppcheck job to the CI

This MR changes the default Debian sid build to wrap make with bear that creates compilation database and use the compilation database to run Cppcheck on the source files systematically.

The job is currently set to be allowed to fail as it will take some time to fix all the Cppcheck detected issues.