Use org-level security policy (ipython/.github/SECURITY.md)

Do not define SECURITY.mds at the repo-level but rather as org-level.
This also fixes the wrong/old email address being used here.

jupyter/security#125 and jupyter/security#124

Author: Yann-P