Ensure no security patches is an error condition for MediaWiki deploys
Add configuration flag require_security_patches which defaults to
True. When True, "scap apply-patches" will fail if there are no
patches found for the specified train version.
Bug: T350070