Update SECURITY.md with full security policy and vulnerability disclosure protocol (#139)

This pull request introduces a complete and professional SECURITY.md
file for the ClarityVault2026 repository. It includes:

- Supported version matrix  
- Responsible vulnerability reporting instructions  
- Disclosure policy  
- Security features used in the project  
- Compliance and acknowledgements

This update improves transparency, trust, and aligns the project with
GitHub's security best practices. It also prepares the repository for
future security advisories and community contributions.

Author: Adnanmd76

SECURITY.md

@@ -0,0 +1,66 @@
+# 🔐 Security Policy
+
+## ✅ Supported Versions
+
+| Version | Supported |
+|---------|-----------|
+| 1.0.0   | ✅ Yes     |
+| 1.1.0   | ✅ Yes     |
+| 1.2.0   | ❌ No      |
+| 2.0.0   | ✅ Yes     |
+
+> We recommend using the latest stable release for full security support.
+
+---
+
+## 🛡️ Reporting a Vulnerability
+
+If you discover a security vulnerability in ClarityVault2026, please follow the steps below:
+
+1. **Do not create a public issue.**  
+2. Email us directly at: `security@clarityvault.xyz`  
+3. Include:
+   - A detailed description of the vulnerability  
+   - Steps to reproduce  
+   - Potential impact  
+   - Any suggested mitigation
+
+We will respond within **72 hours** and coordinate a fix. Once resolved, we may publish a security advisory and credit the reporter (if desired).
+
+---
+
+## 🔒 Disclosure Policy
+
+- We follow **responsible disclosure** practices.  
+- Vulnerabilities will be patched before public disclosure.  
+- Critical issues may result in emergency releases.
+
+---
+
+## 🧪 Security Features
+
+ClarityVault2026 includes:
+
+- ✅ Supabase RLS (Row Level Security)  
+- ✅ JWT-based authentication  
+- ✅ Secret scanning alerts  
+- ✅ GitHub push protection  
+- ✅ CI/CD secret masking
+
+---
+
+## 📜 License & Compliance
+
+This project complies with:
+
+- MIT License  
+- GitHub Security Best Practices  
+- OWASP Top 10 Guidelines
+
+---
+
+## 🙏 Acknowledgements
+
+We thank all contributors and researchers who help keep ClarityVault secure.  
+If you'd like to contribute to security testing, reach out via email or GitHub Discussions.
+