Add baseline for Security pillar rules

[BernieWhite]

To enable better integration with BPA we should add a security only baseline.

This depends on the work completed adding tags for the baseline to reference in #1610.