docs(security): add responsible disclosure policy

[lirantal]

Pull Request check-list

Please make sure to review and check all of these items:

• Does npm run test or npm run test-DIALECT pass with this change (including linting)?
• Does the description below contain a link to an existing issue (Closes #[issue]) or a description of the issue you are solving?
• Have you added new tests to prevent regressions?
• Is a documentation update included (if this change modifies existing APIs, or introduces new ones)?
• Did you update the typescript typings accordingly (if applicable)?
• Did you follow the commit message conventions explained in CONTRIBUTING.md?

Description of change

[papb]

What about this part of the readme?

Perhaps you should change it too to contain a link to the document you created?

[lirantal]

Indeed, I'll push an update.

[codecov]

Codecov Report

Merging #11300 into master will increase coverage by 0.76%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##           master   #11300      +/-   ##
==========================================
+ Coverage   95.58%   96.34%   +0.76%     
==========================================
  Files          91       94       +3     
  Lines        8855     9057     +202     
==========================================
+ Hits         8464     8726     +262     
+ Misses        391      331      -60

Impacted Files	Coverage Δ
lib/dialects/mariadb/index.js	100% <0%> (ø)
lib/dialects/mariadb/connection-manager.js	100% <0%> (ø)
lib/dialects/mariadb/query.js	87.87% <0%> (ø)
lib/dialects/abstract/query-generator.js	97.61% <0%> (+0.17%)	⬆️
lib/sequelize.js	95.95% <0%> (+0.62%)	⬆️
lib/query-interface.js	92.17% <0%> (+1.46%)	⬆️
lib/dialects/mariadb/data-types.js	100% <0%> (+49.01%)	⬆️
lib/dialects/mariadb/query-generator.js	97.87% <0%> (+87.23%)	⬆️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 488c048...bcc1a0e. Read the comment docs.

[sushantdhiman]

I have cleaned up Security.md a bit :)

[lirantal]

@sunshinewyin I think some wording fixes are required but leaving it up to you :)

[lirantal]

Sure thing. Left some comments on wording, let me know if you'd want a PR.

[sushantdhiman]

Thanks @lirantal , de06ac3 fixed those issues

[lirantal]

@sushantdhiman cool thanks! 👌

[sushantdhiman]

🎉 This PR is included in version 5.14.0 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀