[docs] add a security page

[sayakpaul]

Clarify the security scopes of the project.

[drbh]

blocked on #528