RuleType to check for dangerous workflows

[puerco]

Minder should check pull requests and recurrently on the repo for dangerous workflows. For example those that execute code at the pull request target. At PR time we could block, on recurring jobs we could look for an ever increasing test suite that analizes the workflow files.