Backport of core PR12972
https://github.com/bitcoin/bitcoin/pull/12972/files

This converts the test-security.py script to python3 and add a linter
to enforce python3 shebang.

Core ignores python files with no shebang. I prefer to add them to the
files missing it (with the exception of the __init__.py files).

Depends on D3927.

Should return no error:

arc lint --everything

Edit contrib/devtools/test-security.py to remove the shebang.
Check the linter throw an error.

Add a shebang with /usr/bin/env python or /usr/bin/env python2.
Check the linter throw an error.