Add brakeman configuration

- add config/brakeman.yml
- make sure bin/quality will exit on warn from brakeman
- skip CheckForgerySetting check
Move rubocop configuration to config/rubocop.yml