Just enabled a few things in the "Code security and analysis" section

[justinclift]

Noticed that this new repo has most of the code scanning options turned off, so I've enabled some initial ones.

It'll probably generate a bunch of alerts to us in the near future, which will hopefully be useful as we go about updating the various Python and JS dependencies for our initial release.

If it turns out to be a bad idea, we can turn that stuff back off and look at it again later at some point. 😄