STORM-317: Add SECURITY.md to release binaries

I manually verified the proper inclusion of SECURITY.md by creating a distribution (binaries) locally.