Move security groups from rubber-complete.yml to rubber.yml

This will help new users who didn't vulcanize with a complete template
by giving them the expected security groups for their applications.

This resolves issue #259 and also reduces the amount of copy-pasted code between templates.