Add PackageES Security and Compliance task to build

[kmahone]

Enables a series of tasks run against our release pipeline that validate the security and compliance status of our code in an automated fashion. These checks include:

• Component Governance - Inventories open-source components used in our build
• PREfast - C/C++ static analysis for common code errors and exploits
• Policheck - Searches source code, comments, and text for words that could be sensitive legally, culturally, or geopolitically
• Credscan - Looks for credentials left behind in the code/documents and build output files
• CheckCFlags - Validates that compile/link flags match the policies recommended by Windows engineering for inclusion into the OS product image
• CFGCheck/XFGCheck - Validates that the CFG and/or XFG settings were enabled at compile and link time to guard against control flow attacks.

[kmahone]

/azp run

[azure-pipelines]

Azure Pipelines successfully started running 1 pipeline(s).