Include intentionally broken infra as an example

[castrojo]

https://github.com/RhinoSecurityLabs/cloudgoat

We should include something like this ^^ that sets up infrastructure incorrectly so that we can include examples on remediating things like this.