This PR adds a basic security.md file to the repository to give guidelines on how vulnerabilities should be reported for Stream.

Checklist

[x] Project documentation has been updated to reflect the changes in this pull request, if applicable.
[ ] I have tested the changes in the local development environment (see contributing.md).
[ ] I have added phpunit tests.

xwp / stream