This pull creates a new file in the top-level dir describing the project's security policy