Appsec pipeline stages

• Implements static application security testing pipeline using semgrep
• Implements software composition analysis using oss-review-toolkit
• Add application security section to README