Add SECURITY.md policy

[tuantudo]

Add a SECURITY.md file to:

• Describe how to report security vulnerabilities
• Document security policies
• Provide contact information for security issues