docs: add SECURITY.md

Signed-off-by: Shane Utt <shaneutt@linux.com>

Author: shaneutt

SECURITY.md

@@ -0,0 +1,17 @@
+# Security Policy
+
+## Supported Versions
+
+None (yet)
+
+## Reporting a Vulnerability
+
+Please report security vulnerabilities by emailing
+`security <at> praxis <dot> fast`. Do not open a public issue.
+
+Include:
+
+- Description of the vulnerability
+- Steps to reproduce
+- Affected versions
+- Any potential mitigations you have identified