Add security-products/gemnasium config

Summary

Add the gemnasium project.

Configuration

• Enable automatic Go and Docker dependency updates.
• Ignore all files in qa/ directory.
• Automatically scope pipelines by detecting which analyzer was updated and adding respective label.