bandit
Add a tox environment for bandit so it can be run as a gate job eventually. As-is, there are no high severity issues detected in heat. Change-Id: Iab098a1d8bac5c95d67e6867ad5249987c3a786e
