Add SECURITY.md for vulnerability reporting guidelines

Author: GusAI40

SECURITY.md

@@ -0,0 +1,34 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability, please report it responsibly.
+
+**Do not open a public issue.** Instead, email security concerns to the repository maintainer.
+
+### What to Include
+
+- Description of the vulnerability
+- Steps to reproduce
+- Potential impact
+- Suggested fix (if any)
+
+### Response Timeline
+
+- **Acknowledgment**: Within 48 hours
+- **Assessment**: Within 1 week
+- **Fix/Patch**: As soon as possible based on severity
+
+## Supported Versions
+
+| Version | Supported |
+|---|---|
+| Latest | Yes |
+| Older | No |
+
+## Security Best Practices
+
+- Never commit API keys, tokens, or credentials
+- Use environment variables for sensitive configuration
+- Keep dependencies updated
+- Report suspicious activity immediately