Add roave/security-advisories to composer.json

[vitorbrandao]

Details in https://ocramius.github.io/blog/roave-security-advisories-protect-against-composer-packages-with-security-issues/