security.txt checks

[woodruffw]

It'd be nice to have a check that tests for the presence of /.well-known/security.txt.

The absence of security.txt should probably be a MEH rather than a FAIL, just like the robots.txt check.

Reference: https://securitytxt.org/