feat(docs): add security document