Add Python `bandit` with pre-commit

[jbampton]

  - repo: https://github.com/PyCQA/bandit
    rev: 1.9.2
    hooks:
      - id: bandit
        name: run bandit
        description: check Python code for security issues
        args: ['-c=pyproject.toml', '-r']
        additional_dependencies: ['bandit[toml]']

Might need to fix bandit issues