Add SECURITY.md to the enforced repo sync updates.
Signed-off-by: NBen Kochie <superq@gmail.com>