Drupal security workflow

Adds a Drupal security workflow which scans the project's composer.lock file for Composer and Drupal package security advisories.