Add OpenSSF Scorecard to Maven and the mostly used plugins

[hendrikebbers]

The OpenSSF Scorecard are an open standard to give a good indication about the security of the project and the build supply chain of the project. We should add that scorecards to all important projects and define a minimum score that must be reached in all projects.

[hboutemy]

if we could find a better way to name Maven vs Maven core vs Maven Plugins https://maven.apache.org/scm.html