Create SECURITY.md

Point README.md to SECURITY.md to avoid duplicated information, and
removed the explicit version table in SECURITY.md to make it easier to
keep up to date.