We're not getting a lot of value from hosted Semgrep. This PR removes that in favor of just adding rules to the `semgrep/` directory so they can be run locally in CI.