chore: Add SECURITY.md for vulnerability reporting guidelines

Author: lepture

.github/SECURITY.md

@@ -0,0 +1,4 @@
+# Security
+
+If you discover a security vulnerability, **do not submit a public issue or patch**.
+Instead, please report it privately through the **GitHub Security** tab.