Improve our clang-tidy coverage

Our clang-tidy configuration is currently pretty sparse:

Checks: >
  -*,
  boost-*,
  portability-*,
  clang-analyzer-*,
  -clang-analyzer-optin*,
  -clang-analyzer-cplusplus.NewDeleteLeaks,
  -clang-analyzer-core.CallAndMessage
WarningsAsErrors: true
HeaderFilterRegex: '^(apps|components)'

It would be great to add more options to it, like performance-*, modernize-*, …