feat: Owasp zap

[ip6li]

This adds a new unit test which attacks Alovoa an reports possible security weaknesses. This is a "penetration test light".

This requires #310 because OWASP Zap cannot resolve capchas. See src/test/java/com/nonononoki/alovoa/dast/README.md for further information.