Removes the stray `EOFcat SECURITY.md` line accidentally left at the end of SECURITY.md. Closes #530. Thanks to @akhilesharora.
Adds SECURITY.md with responsible disclosure process, scope clarification, and response SLAs.