Create a Security Policy

[joycebrum]

Hi, I noticed that tensorflow/io still doesn't have a SECURITY.md defined. It is an important file to guide users to safely and efficiently report vulnerabilities.

I'll submit together with the issue a PR with a suggested security policy.

Disclosure: I'm from GOSST (google open source security team) and I'm working on improving the supply-chain security of many open source projects.