Add security.txt

[micchickenburger]

Add /.well-known/security.txt for security issue disclosure. We might as well digitally sign. We can use the issues page of this repository for reporting.