Update Scrutinizer configuration.

* Use `php_sim` over `php_cpd` to get better insight on duplicate code.
* Fix the ridiculous amount of space on the comment fix config.
* Add the change tracking analyser to see which code is least stable.
* Add the security checker to make sure our dependencies aren't borked.
* Increase the external coverage timeout from 5 to 10 minutes.