Customer wants to configure PHP Code Sniffer to work with PHPCS Security Audit.

• they use it locally by putting the Security/ folder from phpcs-security-audit in CodeSniffer/Standards,

I think we need to add it to the list of requirements in the composer.json