Security: Add a GitHub Security Policy.
As part of more responsible security disclosure, we are adding a security policy to GitHub.
Fixes #48521. Props whyisjake, ayeshrajans.