Add simple SECURITY.md appropriate for a WG

[afmarcum]

Adding this WG-level SECURITY.md template until an org-level SECURITY.md is put in place.

Feel free to modify as needed to suit WG's preference.