docs: add basic security section

[gbartolini]

closes #209

[sxd]

I think that having access to many reports and using the GitHub power here, we should use the api to have a list of CVEs that we already acknowledge and a list of CVEs open that we know about all this using the API here https://docs.github.com/en/rest/code-scanning/code-scanning?apiVersion=2022-11-28#list-code-scanning-alerts-for-a-repository and updating that list automatically with a workflow tat check for new ones and create a PR if there's new findings, what do you think @mnencia @gbartolini ? That will keep everyone updated and that we're also aware of those CVEs