add semgrep rule to ensure no usage of vm.ffi or vm.tryFfi outside the process library (#15447)

Author: AmadiMichael

.semgrep/rules/sol-rules.yaml

@@ -351,6 +351,19 @@ rules:
         - packages/contracts-bedrock/src/universal/OptimismMintableERC20.sol
         - packages/contracts-bedrock/src/universal/ReinitializableBase.sol
 
+  - id: sol-style-use-process-run
+    languages: [solidity]
+    severity: ERROR
+    message: Use Process.run instead of vm.ffi or vm.tryFfi
+    pattern-either:
+      - pattern: |
+          vm.ffi(...);
+      - pattern: |
+          vm.tryFfi(...);
+    paths:
+      exclude:
+        - packages/contracts-bedrock/scripts/libraries/Process.sol
+
   - id: sol-style-vm-env-only-in-config-sol
     languages: [solidity]
     severity: ERROR