[doc]: Add security policy

[appetrosyan]

We get more than a few issues with security problems reported.

We do have a policy.

[nhantruong2712]

can you describe more in detail @appetrosyan?

[appetrosyan]

Internal. We'll fix this and remove the ticket.