Add security backlog as a theme for planning

Since we want to keep our security backlog manageable, I added this as a theme during planning.