Security governance bootstrap

[rcthomas]

We need to put together some documentation to bootstrap the security subproject, see

• https://jupyter.org/governance/bootstrapping_decision_making.html
• https://jupyter.org/governance/decision_making.html

@rpwagner has some links to docs that can help with this process