Adding disclosure process to security.md

[shahankhatch]

Description

closes: #XXXX

---

Before we can merge this PR, please make sure that all the following items have been
checked off. If any of the checklist items are not applicable, please leave them but
write a little note why.

• Targeted PR against correct branch (see CONTRIBUTING.md)
• Linked to Github issue with discussion and accepted design OR link to spec that describes this work.
• Code follows the module structure standards.
• Wrote unit and integration tests
• Updated relevant documentation (docs/) or specification (x/<module>/spec/)
• Added relevant godoc comments.
• Added a relevant changelog entry to the Unreleased section in CHANGELOG.md
• Re-reviewed Files changed in the Github PR explorer
• Review Codecov Report in the comment section below once CI passes

[barriebyron]

good plan and clearly explained

[barriebyron]

Today I learned about the repo SECURITY.md file and the security process https://docs.github.com/en/code-security/security-advisories/adding-a-security-policy-to-your-repository

[shahankhatch]

lgtm. Thanks @barriebyron for your precise suggestions.