Don't compile openssl in CI

On debian there are well defined valgrind ignores. This means that we
can say that openssl is pure and we don't need our own version.
Also add static analyzers to CI.
7 jobs for master
in 5 minutes and 53 seconds and was queued for 23 seconds