Create SECURITY.md

[superboy-zjc]

Hi DeepBI team,

We are security researchers from Johns Hopkins University. Recently, We found a potential severe vulnerability in your project which can lead to authentication bypass. Would you like to create a security.md to activate the security page so we can submit the vulnerability report and further discuss it in a private channel? Thanks!