VPN gateway is missing security_group. nifcloud_vpn_gateway resources should include a security_group attribute for security purposes. This rule detects nifcloud_vpn_gateway resources that do not include a security_group, which can leave the VPN gateway exposed or indicate an incomplete configuration.