Create a file about validating and sanitizing

Port over from the WordPress plugin developer handbook