Create a channel for reporting security issues

[bruno-brant]

Drawing inspiration from more mature repos such as ASP.NET Core (an obvious one), we should create a channel for users to report security-related issues.

We could use an e-mail, but there might be a better way that would better fit our workflow.

[bruno-brant]

Marked it as discussion - we need to decide on how to do it.