Add a SECURITY.md file with hints for security researchers and other
parties who might report potential security vulnerabilities.
(From meta-yocto rev: c8f27eaa00fdd1a2594aaa70695373f608ff30bb)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>