CI: always upload dependency check artifact

By default, artifacts are only uploaded on a successful run. This is counterintuitive if we want the dependency check to fail on severe CVEs...