Add flake8-bandit checks to CI analysis

This MR migrates the flake8 configuration to the dedicated .flake8 configuration file, and enables bandit security checks (via flake8-bandit).