[enhancement] Add SECURITY.md

[chluff]

Someone finding a bug will probably do it by looking at code on GitHub. It'd be great to also have the security process on the same repository to make it easier for them to follow the team's suggestions.
For reference, yearn.finance does a great job imo by including this file which redirects to their full security process