docs: add SECURITY.md file with vulnerability reporting policy 763f5bf Muiru commited on Dec 21, 2025