Create `SECURITY.md` file

[jpower432]

Description

We need to create a SECURITY.md file under a governance directory of this repository to communicate how to responsibly report vulnerabilities, and what security practices we follow.

Impacted OSPS Baseline Controls

OSPS-VM-02

Acceptance Criteria

• A file named SECURITY.md is created
• The file contains the information on how to disclose a security issue and how maintainers respond to these disclosure reports