Create a security policy

[DerDakon]

This is about 2 things, that are mostly independent, but are relatively close together by content:

• create a security policy for GitHub
• create a RfC9116 security.txt for notqmail.org

For those developers that would be part of the security contact list I suggest that they reply to this with their desired email address and full PGP fingerprint, so that we can create the contact list from this.

[DerDakon]

I would be part of that with eike+sf-mail.de, PGP fingerprint 9A6150DEAB029ADDF4D735E35CA4893E69B9FC4E.

[mbhangui]

Mine is mbhangui +gmail.com PGP fingerprint 90C2847013E4E0BB0538849FC7CBC760014D250C

[schmonz]

Connecting one pending tab to another, here's Jan Schaumann's Open Source Security Policy Wishlist