Create security.md

[stscicrawford]

First pass at security information based on https://github.com/spacetelescope/jwql/blob/master/style_guide/style_guide.md#security