Add Security.md Security Policy for Reporting Vulnerabilities Appropriately

It is important to create a policy for reporting security vulnerabilities for smart contract and blockchain projects outside of github issues. This can often be a security.md or SECURITY.md file that is referenced in the readme.md

Example:
see https://github.com/CosmosContracts/juno/blob/main/SECURITY.md as an example from the cosmos ecosystem.

Full Disclosure:
I am a part of SecurityDAO https://secdao.xyz/ and our DAO does security audits and security consulting for cosmos projects and cosmwasm smart contracts

┆Issue is synchronized with this [Jira Task](https://phi-labs.atlassian.net/browse/ACLI-53) by [Unito](https://www.unito.io)

Review the linked Cosmos SECURITY.md example and the repository README to determine where the policy should be referenced. Add a SECURITY.md policy describing an appropriate vulnerability-reporting route outside GitHub issues, then verify that the README points readers to it.

Written by the indexing model from the issue text.