security: add missing security metadata to the pipeline

[baywet]

effectively a replication of microsoftgraph/msgraph-sdk-dotnet#2751 here. We might also need to add an output, waiting for the next weekly release to confirm the changes are working