Added Socket.dev for reduced supply chain risk

[aleclarson]

I've added the Socket Security GitHub app to the repository, which should help us catch malicious dependencies as soon as possible. I'm not entirely sure if there's more I could do in terms of configuring the GitHub app. If anyone wants to investigate the possible improvements, here is the documentation.