Create `SECURITY.md`

[Barsnes]

The file should include patterns we follow, tools we use, and how we work.

Things to mention:

• Packages
  • How we update these (renovate)
  • Minimum age requirements
• Apps
• SAST
  • Github CodeQL
  • Dependabot
• DAST
  • Polaris Blackduck

General guidelines