Adding SECURITY.md files for security researchers

[ghost]

Adding security.md in order to help security researchers how to report potential security breaches

[mickaelistria]

Thanks

[mrybczyn]

@mickaelistria you might decide the project wants to keep the exact version numbers it supports. It is up to you to decide what you prefer to communicate to security researchers. We have proposed what seems best