SECURITY.md

Security policies for NAV

This document should (eventually) describe security vulnerability policies for NAV. For now, check our machine-readable policy file.