Added security.txt

[Noam-Alum]

Let me know what you think

Things added in this PR

1. The security.txt file.
2. A vulnerability disclosure policy.
3. Links to the security.txt file (If you think we can add it in more places please let me know)
4. A GitHub issue form, this form would be added to all of our GitHub repos if you guys accept it. (Mostly what @bennyvasquez supplied)

TODO

• We still need to sign the security.txt file and upload security-pgp-key.txt, I wasn't sure if I can self sign it, can someone expand on how to go about it?

[codyro]

We still need to sign the security.txt file and upload security-pgp-key.txt, I wasn't sure if I can self sign it, can someone expand on how to go about it?

Signing will happen by the foundation with a trusted PGP key used for this purpose.

TL;DR we'll sign it once we generate the key

[codyro]

Quick scour of the contents in this PR. I know it's a draft :)

[bennyvasquez]

Thank you SOOOOOO much for getting this over the finish line, @Noam-Alum! You took my terrible scratch-pad notes and made something VERY good. <3

We should add a mention of this policy to the /security as well. Even if it's just a "If you're looking for how to report a security flaw, please refer to our $policy."

[bennyvasquez]

Approving and merging per the ALESCo meeting and AlmaLinux/ALESCo#1