SECURITY.md

As part of the Eclipse Foundation, potential security vulnerabilities in this project should be reported to the Eclipse Security Team.