[Docs] Add SECURITY.md Policy

[p3ris0n]

Reward: 200 Points (Stellar Wave 5)

Description
Define the vulnerability disclosure policy.

Acceptance Criteria
Create SECURITY.md detailing supported versions and contact methods.

[Michvista]

@Michvista has applied to work on this issue as part of the Stellar Wave Program's 5th wave.

Hi team,

I would love to take on this issue and establish a formal vulnerability disclosure policy for bc-forge by implementing a comprehensive SECURITY.md.

How I Plan to Approach the Acceptance Criteria:

Supported Versions Matrix: I will construct a clear, easily scannable Markdown table explicitly detailing which major/minor versions of bc-forge are currently receiving active security patches, which are under limited support, and which are officially end-of-life (EOL).

Secure Reporting Protocol: I will document a step-by-step reporting lifecycle, outlining the preferred private communication channels (such as a dedicated security email or GitHub’s private vulnerability reporting feature) to ensure sensitive vulnerabilities are handled securely before a patch is released.

Response Timeline & Disclosure Policy: I will outline clear expectations for researchers regarding initial triage acknowledgment times, status updates, and responsible public disclosure timelines once a fix is safely deployed.

Project Integration: I will add a clean, concise cross-reference link within the main repository files to ensure the security policy is highly visible to anyone auditing or contributing to the codebase.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Michvista to this issue.

[barry01-hash]

@barry01-hash has applied to work on this issue as part of the Stellar Wave Program's 5th wave.

Please approve

ℹ️ Repo Maintainers: To accept this application, review their application or assign @barry01-hash to this issue.

[drips-wave]

Congratulations, @barry01-hash! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on June 2, 2026.

🧑‍💻 @barry01-hash: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊