Adopt a security policy

[icyphox]

We should adopt a security policy for Junction, something like a SECURITY.md file. The essential points that need to be outlined in it are:

• Rules of engagement (like don't test on prod!)
• What counts as a bug (it could be a feature :))
• Reporting a bug (who to contact, report template)

This is in relation to #583, which I wasn't too happy about reporting via an issue, but I didn't know better.

Thoughts?

[zerothabhishek]

I agree. We should quickly adopt some kind of security policy.
Security on this project is a problem (see #571), and having a security policy helps. Can you please suggest another project that we can refer for this ?

[icyphox]

I feel https://github.com/standard/standard/blob/master/SECURITY.md is a good starting point. We can build on this.