Add security.txt file

Closes: #132 (closed)

htpasswd and htaccess are the only dotfiles lektor actually copies from the assets/ directory, so we can't add an actual .well-known/ directory.

to work around this, security.txt will be stored in the site root and a RewriteRule will be added to puppet.