Add SECURITY.md - Security Policy

[Ahlam-Banu]

Hello, I’d like to propose the addition of a SECURITY.md file to this repository. This would make it easier for users/developers to report security vulnerabilities responsibly improving the project’s security posture and potentially increase the project’s OpenSSF Scorecard ratinghttps://scorecard.dev/.
Here’s a guide that could be helpful during implementation: Adding Security Policy to Your Repository

[MichaReiser]

I suggest we just link to Ruff's advisory astral-sh/ruff#16206