Changes to Update security headers

added the non-success response with the status 502

the endpoint scheme security PersonalAccessTokenAuth was added to the API

request property prevent_iframe_embedding list-of-types was widened by adding types null to media type application/json

request property restrict_browser_features list-of-types was widened by adding types null to media type application/json

endpoint added