Add metascan config.

[lr-security-bot]

This adds metascan configuration (metascan.hcl) to the repo.

This PR was created by a bot. If this bot turns evil, let @bobisme know (bob on slack, #dev-product-security).

[skip-ci]