chore(well-known): add security.txt file for security contacts