Moved security bugs and vulnerability policy to SECURITY.md (#8938)

Moved security bugs and vulnerability policy to SECURITY.MD and extended security policy.

Co-authored-by: Yossi Gottlieb <yossigo@gmail.com>