www/openresty: Add MODSECURITY option

Builds ModSecurity v3 as a dynamic module from the same sources and
with the same configure arguments as the server itself, so it loads
without --with-compat. Off by default.

Setting USE_GITHUB drops the openresty tarball from DISTFILES, so set
it explicitly.

Sponsored by: Netzkommune GmbH