renamed notice.txt to attribution.txt, added security.txt

Signed-off-by: Robert Holder <RobertHolder303@gmail.com>