QPPA-11785: security.md creation

[davidberry-sb]

Related Tickets & Documents

https://jira.cms.gov/browse/QPPA-XXXX

---

Description

See ticket description.

---

What type of PR is this?

• 🍕 Feature
• 🐛 Bug Fix
• 📝 Documentation Update
• 🧑‍💻 Code Refactor
• 🔥 Performance Improvements
• ✅ Test
• 🤖 Build
• 🔁 CI
• 📦 Chore
• ⏩ Revert

---

Added tests?

• 👍 yes
• 🙅 no, because they aren't needed
• 🙋 no, because I need help

---

Added to documentation?

• 📜 README.md
• 📓 Confluence
• 🙅 no documentation needed

---

[ ⌥ Optional ] Are there any post-deployment tasks we need to perform?

---

[ ⌥ Optional] What gif best describes this PR or how it makes you feel?

• For Chromium users: https://chrome.google.com/webstore/detail/gifs-for-github/dkgjnpbipbdaoaadbdhpiokaemhlphep
• For Firefox users: https://addons.mozilla.org/en-US/firefox/addon/gifs-for-github
• After installing the extension, click on the "GIF" button in the comment box and search for a gif that describes your PR!

[peter-stancic]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.