Policy: Add a security policy

[ojeda-e]

Set instructions to report a security vulnerability in the project.. See https://docs.github.com/en/code-security/how-tos/report-and-fix-vulnerabilities/configure-vulnerability-reporting/add-security-policy

To fix this issue:

• Add a security policy in SECURITY.md file.