Add security policy

Author: Not-A-Normal-Robot

SECURITY.md

@@ -0,0 +1,7 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you find a vulnerability, either in the website or the database, please report it directly by email to `[email protected]`.  
+I have notifications enabled on that email, so you should expect me to read it in less than 24 hours.  
+If I don't respond in 36 hours, try to send a follow-up email; I probably read it but forgot to respond.