OAS3 - Add validation & content assist for `type` in Security Scheme Object

[tedepstein]

In the Security Scheme Object, type is currently treated as an unconstrained string.

According to the spec:

Valid values are "apiKey", "http", "oauth2", "openIdConnect".

We should validate this, and should offer valid values in code assist.