Add SECURITY.md file

[TerryHowe]

What this PR does / why we need it:

Which issue(s) this PR fixes (optional, in fixes #<issue number>(, fixes #<issue_number>, ...) format, will close the issue(s) when PR gets merged):
Fixes #

Please check the following list:

• Does the affected code have corresponding tests, e.g. unit test, E2E test?
• Does this change require a documentation update?
• Does this introduce breaking changes that would require an announcement or bumping the major version?
• Do all new files have an appropriate license header?

[codecov-commenter]

Codecov Report

❗ No coverage uploaded for pull request base (main@ad02369). Click here to learn what that means.
The diff coverage is n/a.

❗ Your organization is not using the GitHub App Integration. As a result you may experience degraded service beginning May 15th. Please install the Github App Integration for your organization. Read more.

@@           Coverage Diff           @@
##             main    #1082   +/-   ##
=======================================
  Coverage        ?   79.92%           
=======================================
  Files           ?       56           
  Lines           ?     2914           
  Branches        ?        0           
=======================================
  Hits            ?     2329           
  Misses          ?      407           
  Partials        ?      178           

[qweeah]

LGTM