ci: Enable static analysis jobs

Related: xfce/xfce4-dev-tools!112 (merged)

Only scan-build is enabled in this case, as gcc-analyzer issues a bunch of warnings about xfce4++ that I don't want to deal with right now.