Add SECURITY.md
Add a SECURITY.md to the project.