Create SECURITY.md

[GeneratedUserFJ839]

Added a security policy outlining how to report vulnerabilities and the project’s commitments to researchers.

Explanation

References

Checklist

• I've updated the test suite for new or updated code as appropriate
• I've updated documentation (JSDoc, Markdown, etc.) for new or updated code as appropriate
• I've communicated my changes to consumers by updating changelogs for packages I've changed
• I've introduced breaking changes in this PR and have prepared draft pull requests for clients and consumer packages to resolve them

[GeneratedUserFJ839]

I have read the CLA Document and I hereby sign the CLA