Create SECURITY.md for security policy

Added a security policy document outlining supported versions and vulnerability reporting.