What security checks should be included in the CI/CD pipeline for Terraform or CloudFormation at Appfolio?