REPO-003 [HIGH] Create SECURITY.md with vulnerability disclosure process

[kilodesodiq-arch]

No SECURITY.md or vulnerability reporting channel for a platform handling humanitarian aid and PII. Create at repo root with supported versions, reporting process, response timeline, and disclosure policy.

[Whiznificent]

Hello,

I’m a smart contract and full-stack developer interested in contributing to this issue.

I have hands-on experience contributing to open-source projects through OnlyDust and have participated in Drips Wave 1, Wave 2, Wave 5.

My technical expertise includes Rust, Soroban, Cairo, Solidity, and TypeScript, with a strong focus on developing secure, scalable, and maintainable blockchain solutions.

After reviewing the scope of this issue, I’m confident in my ability to deliver a complete, well-tested solution within 24 hours of assignment. I prioritize writing clean code, maintaining clear documentation, and implementing efficient solutions.

I’d be grateful for the opportunity to contribute and help advance this project.

Thank you.