Add security policy document

[ionut-arm]

We should document our approach to security issue management and disclosure in a SECURITY.md file, similar to the one serving the Parsec service.