SECURITY.md

Security Policy

Please see the OpenProject Statement on Security: https://www.openproject.org/docs/security-and-privacy/statement-on-security/