Add SECURITY.md per dev-list discussion#1001

csutherl wants to merge 2 commits into

apache:mainapache/tomcat:mainfrom

csutherl:add-security-mdcsutherl/tomcat:add-security-mdCopy head branch name to clipboard