Add security policy (#568)
Add security policy (#568)

* Create SECURITY.md

* Update SECURITY.md
google/exposure-notifications-server,google/exposure-notifications-server,google/exposure-notifications-server