New rule: Disallow use of Object.prototypes builtins directly (no-prototype-builtins)

[feross]

https://eslint.org/docs/rules/no-prototype-builtins

This is an important rule which has security and DDoS implications. It's also part of the ESLint recommended set. I plan to ship it standard 13.

[feross]

3% failure rate in the ecosystem. This is a bit high and most of these seem to not be actually crash risks, but on the other hand, I have forgotten that this is a possible issue before and would rather just be reminded to always use Object.prototype.hasOwnProperty.call(obj, 'key') than to risk forgetting to do so when it really counts.

Also, one doesn't use hasOwnProperty that often anyway, so this shouldn't add too much verbosity.