Add Security Policy

[shaardie]

This patch adds a security policy defining which versions of this library are supported and how to best report security issues.