Docs/security policy

[Pranav-MSK]

Description

Adds SECURITY.md with a private vulnerability reporting workflow. Closes #52

---

Type of Change

• feat
• fix
• docs
• refactor
• chore
• accidental genius

---

Checklist

Overengineering Verification

• I have introduced at least one unnecessary abstraction layer
• The solution is more complex than the problem warrants
• A reasonable engineer would question at least one design decision
• I have named something in a way that requires further explanation

Validation

• pytest passes locally with no failures
• New functionality is covered by tests
• I have not deleted tests to make CI green
• Documentation has been updated if needed

Traceability

• This PR references a related issue
• The branch name vaguely reflects the chaos introduced

General

• Future contributors may question my decisions, but not my confidence
• Code has been self-reviewed
• No secrets, credentials, or hardcoded paths were smuggled in
• I have read the CONTRIBUTING.md guidelines

---

Screenshots (if applicable)

---

Additional Notes

---

"Any fool can write code that a computer can understand. Good programmers write code that humans can understand — but we don't do that here."