Add SECURITY.md to Github repo

[elharo]

We should add a SECURITY.md file to the various Github repos with instructions for privately reporting security bugs to the team.

See https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository