[Contributing] Add a security policy

[gracekishino]

https://docs.github.com/en/code-security/getting-started/adding-a-security-policy-to-your-repository