Add Dynamic Code Analysis with OWASP ZAP

[CheesyLaZanya]

Lower priority item as not strictly necessary to meet a passing certification for the OpenSSF Best Practices badge.

Add a process/standard for Dynamic Code Analysis using OWASP ZAP.

Also add a Github action to check what we can check via the https://github.com/zaproxy/action-baseline action.