Create SECURITY.md for vulnerability reporting

Added a security policy document outlining vulnerability reporting and supported versions.

Author: Pranav-MSK

SECURITY.md

@@ -0,0 +1,18 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+If you discover a security vulnerability in Commit-Art:
+
+- Please do NOT open a public issue.
+- Email the repository owner directly via GitHub profile contact.
+
+This project is intentionally minimal and serverless, but workflow abuse or automation exploits should be reported responsibly.
+
+---
+
+## Supported Versions
+
+Currently supported:
+
+- Main branch (latest)