SECURITY.md

Given that Servo does not yet have customers or products, we are comfortable accepting the security related issues asGitHub security reports for now.

There aren’t any published security advisories