raposza/tools: SECURITY.md

<!-- Copyright (c) 2026 bentzn --> <!-- SPDX-License-Identifier: Apache-2.0 --> # Security ## Reporting a vulnerability Write to **info@raposza.com**. Say what you found, how to reproduce it, and what you think it lets an attacker do. You will get an acknowledgement; if the finding is valid you will