Add a SECURITY.md file describing our security policy.