CARRY: Add Snyk security scan config

In addition to vendor directories, we can ignore things that do not end
up in the product.

Co-Authored-By: Martin André <[email protected]>

Author: racheljpg

.snyk

@@ -0,0 +1,10 @@
+# References:
+# https://docs.snyk.io/scan-applications/snyk-code/using-snyk-code-from-the-cli/excluding-directories-and-files-from-the-snyk-code-cli-test
+# https://docs.snyk.io/snyk-cli/commands/ignore
+exclude:
+  global:
+    - "vendor/**"
+    - "**/vendor/**"
+    - "hack/**"
+    - "test/**"
+    - "**/*_test.go"