Create Security Policy

[bensternthal]

Description

As part of project graduation, every OpenJS project must have a security policy.

Minimal guidelines can be found here and project owners are encouraged to use GitHub's native security policy features that can be found under the "security" tab.

Expected Behavior

No response

Steps to Reproduce

N/A

Environment

N/A

Logs

No response