Add AMOE metric: Incident Management Ownership

[lebogg]

Solves #118

Current Questions:

• Is Incident Management a group of the "Auditing" security feature or
  • is it directly attached to a resource or
  • is it a resource itself
• Is ownership a security feature or do we want something like "mixed duties"

[franzling]

This rule assesses whether a [Policy] that offers the property [?], has [SecurityIncident.Team] set correctly.