doc: add SECURITY.md to readme.md
This adds a SECURITY.md file and links to the security document per the request of @trott at a recent SF Node meetup.
Checklist
-
make -j4 test
(UNIX), orvcbuild test
(Windows) passes -
documentation is changed or added -
commit message follows commit guidelines