docs: Add SECURITY.md

Add a SECURITY.md file with a disclaimer and relevant information for
the parties who might report potential security vulnerabilities.

Signed-off-by: Emekcan Aras <Emekcan.Aras@arm.com>