Create a initial security policy This is based on a document from the OpenSSF scorecard project https://github.com/ossf/scorecard/blob/main/SECURITY.md
Bernhard Fröhlich