Refactor and move security validations

[XVincentX]

This PR will address most of the technical debt we had in the security validations. In particular:

• Moves the HTTP security validations to the HTTP package and not keep them in core. They didn't make sense since in the core package we do not know if we're handling HTTP stuff. This allowed me to remove a lot of unknown and weird lodash.get calls and use precise types
• Validate Security is now standardised and uses the same ValidatorFn shape we're using for valdidateInput and validateOutput
• The "securityHandler" look up function has been replaced with a static one which is type safer and probably even faster. The runtime option didn't make sense.
• Removed useless parameters that were not used, as well some optional that, well, were not optional
• Narrowed the types; security is only checking security, we do not need to pass the whole HTTP Request
• Tests and some minor bugs have been fixed because of the more precise typing

There are some other internal refactors that need to be done (although not urgent) because the current code is really hard to reason about. I'll tame this beast in the next airplane (tomorrow)

[karol-maciaszek]

Looks great, yet another piece of code is polished 👍

Couple minor comments added.

[karol-maciaszek]

LGTM 👍