Publish a security policy

[micolous]

This project doesn't publish a security policy: https://github.com/suitenumerique/django-lasuite/security

It looks like other Suite projects publish one, eg: https://github.com/suitenumerique/docs/security

Can you please publish one, where should security reports be sent, what do you consider "in scope", etc.

Thanks!