Update security scanning and security policy.

[EEParker]

• [x] Add dependabot dependency scanning.
• [x] Add codeql or other static code analysis
• [x] Add a security policy for vulnerability reporting