Add repo SECURITY.md

[joelsmith]

See kubernetes/committee-security-response#105

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
To complete the pull request process, please assign andrewsykim
You can assign the PR to them by writing /assign @andrewsykim in a comment when ready.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[nikhita]

Closing since the security policy is now defined org-wide - kubernetes/org#2081

For this repo, it can be seen at https://github.com/kubernetes/cloud-provider-sample/security/policy