We should document our approach to security issue management and disclosure in a `SECURITY.md` file, similar to [the one](https://github.com/parallaxsecond/parsec/blob/main/SECURITY.md) serving the Parsec service.
