Added security.yml instructions to the readme.