add CONTRIBUTING.md, SECURITY.md and precommit hook