Create project.yaml for WebGoat

[AsheChang]

[google-cla[bot]]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

[github-actions[bot]]

AsheChang is integrating a new project:
- Main repo: https://github.com/AsheChang/WebGoat.git
- Criticality score: 0.39740

[jonathanmetzman]

I don't think this project is a good fit for oss-fuzz as it's a project meant to contain bugs. You can use https://google.github.io/clusterfuzzlite/ for it though.