Update the Security Policy

[ttriboulot-dd]

👋 I see that the SECURITY.md file is empty, what would be the proper way to responsibly disclose what could be a security issue?

[elezar]

@kad do you know someone from tags.cncf.io that would be able to answer this?

[elezar]

I have created #276. Not sure whether this is the correct content.