Including roslyn.sonaranalyzer.security.cs rules in Roslyn analysis

this seems to be a duplicate of Finding SonarAnalyzer.Security Analyzer