SECURITY.md

⚠️ You must never report security 🔒 related issues, vulnerabilities or bugs including sensitive information to the issue tracker, or elsewhere in public. Instead sensitive bugs must be sent by email to devcontainers.contrib+security@gmail.com.