Add BadVersion plugin to check for CVEs

[shawnlaffan]

As discussed in PerlAlien/Alien-Libxml2#43, it would likely be useful to develop a Build plugin that checks for known CVEs and flags them as bad values.

Assigning to myself for now. However, I won't get to it in the short term so anyone is welcome to have a go.